CVE-2019-10781: Schema-Inspector Project Schema-Inspector

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

In schema-inspector before 1.6.9, a maliciously crafted JavaScript object can bypass the `sanitize()` and the `validate()` function used within schema-inspector.

Affected products

• Schema-Inspector Project Schema-Inspector: before 1.6.9 (fixed in 1.6.9)

Published 2020-01-22. Last modified 2026-06-17.