← All advisories

Critical severity9.8NVD Advisory· Published Aug 10, 2020· Updated Jun 17, 2026

CVE-2020-17479

CVE-2020-17479

Description

jpv (aka Json Pattern Validator) before 2.2.2 does not properly validate input, as demonstrated by a corrupted array.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
jpvnpm	< 2.2.2	2.2.2

Affected products

3

jpv/Json Pattern Validatordescription
JSON Pattern Validator Project/JSON Pattern Validator
cpe:2.3:a:json_pattern_validator_project:json_pattern_validator:*:*:*:*:*:node.js:*:*
Range: <2.2.2
ghsa-coords
pkg:npm/jpv
Range: < 2.2.2

Patches

Vulnerability mechanics

References

6

github.com/manvel-khnkoyan/jpv/commit/e3eec1215caa8d5c560f5e88d0943422831927d6nvdPatchThird Party AdvisoryWEB
blog.sonatype.com/cve-2020-17479nvdExploitThird Party AdvisoryWEB
github.com/manvel-khnkoyan/jpv/issues/10nvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-vh6r-g38f-q3w8ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2020-17479ghsaADVISORY
www.npmjs.com/package/jpvnvdProductThird Party AdvisoryWEB

News mentions

0

No linked articles in our index yet.