apidevtools @apidevtools/json-schema-ref-parser vulnerabilities

Latest apidevtools @apidevtools/json-schema-ref-parser CVEs

Newest publication first

1. CVE-2026-15195 apidevtools json-schema-ref-parser pointer.ts Pointer.set prototype pollution

   Published 2026-07-09

   Medium·CVSS 5.3 EPSS 0.52%

   A weakness has been identified in apidevtools json-schema-ref-parser. This impacts the function Refs.set/Pointer.set in the library lib/pointer.ts. Executing a manipulation can lead to improperly controlled modification of object prototype attributes. The attack can be launched r...

2. CVE-2024-29651 json-schema-ref-parser Prototype Pollution issue

   Published 2024-05-20

   High·CVSS 8.1 EPSS 0.80%

   A Prototype Pollution issue in API Dev Tools json-schema-ref-parser v.11.0.0 and v.11.1.0 allows a remote attacker to execute arbitrary code via the bundle(), parse(), resolve(), dereference() functions.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.