Schema Inspector

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:schema-inspector_project:schema-inspector:*:*:*:*:*:node.js:*:*

part: a version: * update: *

VendorSchema Inspector Project (3cca856d-eeb8-5e84-8793-93dfadeaa8b3)
ProductSchema Inspector (0e6fcfef-f242-50f9-887c-ecea9a295aca)
Edition*
Language*
Software edition*
Target softwarenode.js
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/atinux/schema-inspector purl2cpe 2026-06-01 10:13:47.383777
pkg:github/schema-inspector/schema-inspector purl2cpe 2026-06-01 10:13:47.383780

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-21267 vulnerable 2026-06-08 05:29:11.482939 Regular Expression Denial-of-Service in npm schema-inspector
HIGH (7.5)
Schema-Inspector is an open-source tool to sanitize and validate JS objects (npm package schema-inspector). In before version 2.0.0, email address validation is vulnerable to a denial-of-service attack where some input (for example `a@0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.`) will freeze the program or web browser page executing the code. This affects any current schema-inspector users using any version to validate email addresses. Users who do not do email validation, and instead do other types of validation (like string min or max length, etc), are not affected. Users should upgrade to version 2.0.0, which uses a regex expression that isn't vulnerable to ReDoS.
Published: 2021-03-19T20:25:13.000Z
Updated: 2024-08-03T18:09:14.989Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.