What’s Vulnerable › Vulnerabilities

CVE-2024-29651

• Severity: high (CVSS 8.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-05-20 · updated 2026-06-17
• Weakness: CWE-1321

Description

A Prototype Pollution issue in API Dev Tools json-schema-ref-parser v.11.0.0 and v.11.1.0 allows a remote attacker to execute arbitrary code via the bundle()`, `parse()`, `resolve()`, `dereference() functions.

Affected products

• apidevtools json-schema-ref-parser: 11.0.0, 11.1.0

References

• https://gist.github.com/tariqhawis/5db76b38112bba756615b688c32409ad
• https://gist.github.com/tariqhawis/5db76b38112bba756615b688c32409ad

Get alerted when CVE-2024-29651 or the next vulnerability affects your stack