AIKIDO-2026-516453
@apidevtools/json-schema-ref-parser is vulnerable to Prototype Pollution
21
Low Risk
This Affects:
@apidevtools/json-schema-ref-parserTL;DR
The library exposes public $Refs.set() and Pointer.set() APIs that write values into a schema object using JSON Pointer tokens. The internal pointer setter performs nested writes without rejecting dangerous tokens such as __proto__, constructor, and prototype. Passing a crafted pointer string lets externally influenced input modify Object.prototype, corrupting application-wide object behavior. The fix rejects unsafe JSON Pointer assignment tokens before the nested write occurs.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and your application passes externally influenced JSON Pointer strings to the $Refs.set() or Pointer.set() API.
Background info
@apidevtools/json-schema-ref-parser is vulnerable to Prototype Pollution in versions 15.3.0 - 15.3.5.
How to fix this
Upgrade the @apidevtools/json-schema-ref-parser library to the patch version.
Links
Other
github.com/APIDevTools/json-schema-ref-parser/
vuldb.com/cve/CVE-2026-15195vuldb.com/submit/851809vuldb.com/vuln/377123vuldb.com/vuln/377123/cti
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant