Description
In schema-inspector before 1.6.9, a maliciously crafted JavaScript object can bypass the `sanitize()` and the `validate()` function used within schema-inspector.
Remediation
References
https://github.com/Atinux/schema-inspector/commit/345a7b2eed11bb6128421150d65f4f83fdbb737d
https://snyk.io/vuln/SNYK-JS-SCHEMAINSPECTOR-536970
Related Vulnerabilities
CVE-2020-26939 Vulnerability in maven package org.bouncycastle:bcprov-ext-jdk15to18
CVE-2021-31684 Vulnerability in maven package net.minidev:json-smart
CVE-2020-7642 Vulnerability in maven package org.webjars.npm:lazysizes
CVE-2022-1330 Vulnerability in maven package org.webjars.bowergithub.alvarotrigo:fullpage.js
CVE-2020-17530 Vulnerability in maven package org.apache.struts:struts2-core