lud/jsv vulnerabilities

CVEs whose affected-version data names the lud/jsv package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-117680Low· 2.1PoC

1w ago

jsv treats regex match budget exhaustion as a non-match, bypassing patternProperties and not

Improper Check for Unusual or Exceptional Conditions vulnerability in the pattern and patternProperties keywords in lud jsv allows an unauthenticated remote attacker to bypass schema validation via a string that matches a schema regex on…

▾ Twilightlud · jsvEPSS 0.19%via CVEORG