Unknown · Json-Schema-Ref-Parser · CVE-2024-29651
**Name of the Vulnerable Software and Affected Versions**
json-schema-ref-parser versions 11.0.0 through 11.1.0
**Description**
A Prototype Pollution issue in API Dev Tools allows a remote attacker to execute arbitrary code via the `bundle()`, `parse()`, `resolve()`, `dereference()` functions.
**Recommendations**
For versions 11.0.0 through 11.1.0, consider disabling the `bundle()`, `parse()`, `resolve()`, `dereference()` functions as a temporary workaround until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.