Summary

In this post, we will understand the prototype pollution issue in the @apidevtools/json-schema-ref-parser (CVE-2024-29651). We will analyze the vulnerable code, understand the PoC, and take a look at the patches to see how it was fixe.

Script link

(CVE-2024-29651) Prototype Pollution vulnerability affecting @apidevtools/json-schema-ref-parser, versions 11.0.0, 11.1.0

(CVE-2024-29651) Prototype Pollution vulnerability affecting @apidevtools/json-schema-ref-parser, versions 11.0.0, 11.1.0 - CVE-2024-29651.md

Description