CyberSecBulletin

Json5 vulnerabilities

We track 1 vulnerability in Json5 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on December 24, 2022.

1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score

Latest Json5 vulnerabilities

  • 8.8 High severity

    json5: Improperly Controlled Modification of Object Prototype Attributes

    CVE-2022-46175Json5EPSS 9.7%

    JSON5 is an extension to the popular JSON file format that aims to be easier to write and maintain by hand (e.g. for config files). The `parse` method of the JSON5 library before and including versions 1.0.1 and 2.2.1 does not restrict parsing of keys named `_