Known Vulnerabilities for Json-schema by Json-schema Project
Listed below are 1 of the newest known vulnerabilities associated with "Json-schema" by "Json-schema Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-123846 json | In JetBrains IntelliJ IDEA before 2026.3 blind SSRF was possible via remote references in JSON Schema validation | Not Provided | 2026-11-06 | 2026-11-06 |
| CVE-2026-123845 json | In JetBrains IntelliJ IDEA before 2026.3 path traversal was possible via JSON Schema references in untrusted projects | Not Provided | 2026-11-06 | 2026-11-06 |
| CVE-2026-120552 json | The SEO Engine – Smart SEO with AI, Schema & Redirection for WordPress plugin for WordPress is vulnerable to Stored Cross-S... | Not Provided | 2026-11-03 | 2026-11-03 |
| CVE-2026-114129 json | stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. From 2.0.0... | Not Provided | 2026-10-21 | 2026-10-28 |
| CVE-2026-111762 json | A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, RestHandler.parseRequestBody ... | Not Provided | 2026-10-20 | 2026-10-28 |
| CVE-2026-109367 json | The All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) plugin for W... | Not Provided | 2026-10-31 | 2026-11-02 |
| CVE-2026-108810 json | A security flaw has been discovered in tsi-coop tsi-dpdp-cms 0.5.0/0.5.1/0.5.2. Impacted is an unknown function of the compon... | Not Provided | 2026-10-12 | 2026-10-14 |
| CVE-2026-104635 json | Uncontrolled Recursion vulnerability in Protobuf.JSON.Decode in elixir-protobuf protobuf allows an unauthenticated remote att... | Not Provided | 2026-10-09 | 2026-10-15 |
| CVE-2026-104634 json | Incorrect Type Conversion or Cast vulnerability in BeamMCP.Server in ScriptKittyOS beam_mcp allows an MCP client's JSON true,... | Not Provided | 2026-10-08 | 2026-10-08 |
| CVE-2026-103036 json | oRPC is a tool that helps build APIs that are end-to-end type-safe and adhere to OpenAPI standards. Prior to 1.14.9, the @orp... | Not Provided | 2026-10-02 | 2026-10-05 |