node-ajv vulnerabilities (Debian)
19 vulnerabilities.
-
node-ajvDebian fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references 3.7 Low -
node-ajvDebian fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decoding 6.1 Medium -
node-ajvDebian fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalization 4.8 Medium -
node-ajvDebian fast-uri vulnerable to improper path equivalence in relative reference normalization 3.7 Low -
node-ajvDebian fast-uri vulnerable to mailto header injection via percent-encoded field-name desynchronization 4.8 Medium -
node-ajvDebian fast-uri vulnerable to inconsistent host case normalization via percent-encoded octets 4.8 Medium -
node-ajvDebian fast-uri vulnerable to host confusion via an unclosed bracket in the URI authority 7.5 High -
node-ajvDebian fast-uri vulnerable to authority injection via an unvalidated port in serialize 7.5 High -
node-ajvDebian fast-uri vulnerable to host confusion via percent-encoded scheme normalization 7.5 High -
node-ajvDebian fast-uri vulnerable to server-side request forgery via malformed IPv6 normalization 7.5 High -
node-ajvDebian fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references 7.5 High -
node-ajvDebian fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding 7.5 High -
node-ajvDebian fast-uri vulnerable to host confusion via backslash authority introducer 7.5 High -
node-ajvDebian fast-uri vulnerable to host confusion via literal backslash authority delimiter 7.5 High -
node-ajvDebian fast-uri vulnerable to host confusion via failed IDN canonicalization 7.5 High -
node-ajvDebian ajv has ReDoS when using `$data` option 2.9 Low -
node-ajvDebian Prototype Pollution in Ajv 5.6 Medium -
node-ajvDebian fast-uri vulnerable to host confusion via percent-encoded authority delimiters 7.5 High -
node-ajvDebian fast-uri vulnerable to path traversal via percent-encoded dot segments 7.5 High