{"affected":[{"product":"json-schema-ref-parser","source":"CNA: VulDB","vendor":"apidevtools","versions":[{"status":"affected","version":"7.1.4"},{"status":"affected","version":"8.0.0"},{"status":"affected","version":"9.0.0"},{"status":"affected","version":"9.0.1"},{"status":"affected","version":"9.0.2"},{"status":"affected","version":"9.0.3"},{"status":"affected","version":"9.0.5"},{"status":"affected","version":"9.0.6"},{"status":"affected","version":"9.0.7"},{"status":"affected","version":"9.0.8"},{"status":"affected","version":"9.0.9"},{"status":"affected","version":"9.1.0"},{"status":"affected","version":"9.1.2"},{"status":"affected","version":"10.0.0"},{"status":"affected","version":"10.0.1"},{"status":"affected","version":"10.1.0"},{"status":"affected","version":"11.0.0"},{"status":"affected","version":"11.1.0"},{"status":"affected","version":"11.1.1"},{"status":"affected","version":"11.2.0"},{"status":"affected","version":"11.2.1"},{"status":"affected","version":"11.2.2"},{"status":"affected","version":"11.2.3"},{"status":"affected","version":"11.2.4"},{"status":"affected","version":"11.3.0"},{"status":"affected","version":"11.4.0"},{"status":"affected","version":"11.4.1"},{"status":"affected","version":"11.4.2"},{"status":"affected","version":"11.5.0"},{"status":"affected","version":"11.5.1"},{"status":"affected","version":"11.5.2"},{"status":"affected","version":"11.5.3"},{"status":"affected","version":"11.5.4"},{"status":"affected","version":"11.5.5"},{"status":"affected","version":"11.6.0"},{"status":"affected","version":"11.6.1"},{"status":"affected","version":"11.6.2"},{"status":"affected","version":"11.6.3"},{"status":"affected","version":"11.6.4"},{"status":"affected","version":"11.6.5"},{"status":"affected","version":"11.7.0"},{"status":"affected","version":"11.7.1"},{"status":"affected","version":"11.7.2"},{"status":"affected","version":"11.7.3"},{"status":"affected","version":"11.8.2"},{"status":"affected","version":"11.9.0"},{"status":"affected","version":"11.9.1"},{"status":"affected","version":"11.9.2"},{"status":"affected","version":"11.9.3"},{"status":"affected","version":"12.0.0"},{"status":"affected","version":"12.0.1"},{"status":"affected","version":"12.0.2"},{"status":"affected","version":"13.0.0"},{"status":"affected","version":"13.0.1"},{"status":"affected","version":"13.0.2"},{"status":"affected","version":"13.0.3"},{"status":"affected","version":"13.0.4"},{"status":"affected","version":"13.0.5"},{"status":"affected","version":"14.0.0"},{"status":"affected","version":"14.0.1"},{"status":"affected","version":"14.0.2"},{"status":"affected","version":"14.0.3"},{"status":"affected","version":"14.1.0"},{"status":"affected","version":"14.1.1"},{"status":"affected","version":"14.2.0"},{"status":"affected","version":"14.2.1"},{"status":"affected","version":"15.0.0"},{"status":"affected","version":"15.0.1"},{"status":"affected","version":"15.1.0"},{"status":"affected","version":"15.1.1"},{"status":"affected","version":"15.1.2"},{"status":"affected","version":"15.1.3"},{"status":"affected","version":"15.2.0"},{"status":"affected","version":"15.2.1"},{"status":"affected","version":"15.2.2"},{"status":"affected","version":"15.3.0"},{"status":"affected","version":"15.3.1"},{"status":"affected","version":"15.3.2"},{"status":"affected","version":"15.3.3"},{"status":"affected","version":"15.3.4"},{"status":"affected","version":"15.3.5"},{"status":"unaffected","version":"15.3.6"}]}],"cveId":"CVE-2026-15195","cwes":["CWE-1321","CWE-94"],"description":"A weakness has been identified in apidevtools json-schema-ref-parser. This impacts the function Refs.set/Pointer.set in the library lib/pointer.ts. Executing a manipulation can lead to improperly controlled modification of object prototype attributes. The attack can be launched remotely. Upgrading to version 15.3.6 will fix this issue. This patch is called a786bc6afc3674f650496472ee93d5cf74c4bd84. It is suggested to upgrade the affected component. The project maintainer confirms: \"I reproduced prototype pollution through the public $Refs.set() API in published versions 7.1.4, 9.0.0, 11.0.0, 14.0.0, 14.2.1, 15.3.0, and 15.3.5. The same pointer is rejected by 15.3.6 without modifying Object.prototype. This reported path requires an application to pass an attacker-controlled pointer to $Refs.set(); dependency presence alone does not establish exploitability.\"","epss":{"date":"2026-11-01","percentile":0.39646,"score":0.00457},"exploits":[{"kind":"exploit","source":"ADP: CISA-ADP","url":"https://github.com/APIDevTools/json-schema-ref-parser/issues/421"}],"kev":null,"metrics":[{"score":5.3,"severity":"medium","source":"CNA: VulDB","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","version":"4.0"},{"score":6.3,"severity":"medium","source":"CNA: VulDB","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C","version":"3.1"},{"score":6.3,"severity":"medium","source":"CNA: VulDB","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C","version":"3.0"},{"score":6.5,"severity":"medium","source":"CNA: VulDB","vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C","version":"2.0"},{"score":2.1,"severity":"low","source":"NVD: cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0"},{"score":6.3,"severity":"medium","source":"NVD: cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","version":"3.1"},{"score":6.5,"severity":"medium","source":"NVD: cna@vuldb.com","vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","version":"2.0"}],"modifiedAt":1793611056773,"publishedAt":1783617308989,"references":[{"source":"CNA: VulDB","tags":["vdb-entry","technical-description"],"url":"https://vuldb.com/vuln/377123"},{"source":"CNA: VulDB","tags":["signature","permissions-required"],"url":"https://vuldb.com/vuln/377123/cti"},{"source":"CNA: VulDB","tags":["third-party-advisory"],"url":"https://vuldb.com/cve/CVE-2026-15195"},{"source":"CNA: VulDB","tags":["third-party-advisory"],"url":"https://vuldb.com/submit/851809"},{"source":"CNA: VulDB","tags":["issue-tracking"],"url":"https://github.com/APIDevTools/json-schema-ref-parser/issues/421"},{"source":"CNA: VulDB","tags":["issue-tracking"],"url":"https://github.com/APIDevTools/json-schema-ref-parser/issues/421#issuecomment-6547659739"},{"source":"CNA: VulDB","tags":["patch"],"url":"https://github.com/APIDevTools/json-schema-ref-parser/commit/a786bc6afc3674f650496472ee93d5cf74c4bd84"},{"source":"CNA: VulDB","tags":["patch"],"url":"https://github.com/APIDevTools/json-schema-ref-parser/releases/tag/v15.3.6"},{"source":"CNA: VulDB","tags":["product"],"url":"https://github.com/APIDevTools/json-schema-ref-parser/"},{"source":"ADP: CISA-ADP","tags":["exploit"],"url":"https://github.com/APIDevTools/json-schema-ref-parser/issues/421"},{"source":"cna@vuldb.com","tags":[],"url":"https://github.com/APIDevTools/json-schema-ref-parser/"},{"source":"cna@vuldb.com","tags":[],"url":"https://github.com/APIDevTools/json-schema-ref-parser/commit/a786bc6afc3674f650496472ee93d5cf74c4bd84"},{"source":"cna@vuldb.com","tags":[],"url":"https://github.com/APIDevTools/json-schema-ref-parser/issues/421"},{"source":"cna@vuldb.com","tags":[],"url":"https://github.com/APIDevTools/json-schema-ref-parser/issues/421#issuecomment-6547659739"},{"source":"cna@vuldb.com","tags":[],"url":"https://github.com/APIDevTools/json-schema-ref-parser/releases/tag/v15.3.6"},{"source":"cna@vuldb.com","tags":[],"url":"https://vuldb.com/cve/CVE-2026-15195"},{"source":"cna@vuldb.com","tags":[],"url":"https://vuldb.com/submit/851809"},{"source":"cna@vuldb.com","tags":[],"url":"https://vuldb.com/vuln/377123"},{"source":"cna@vuldb.com","tags":[],"url":"https://vuldb.com/vuln/377123/cti"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":[],"url":"https://github.com/APIDevTools/json-schema-ref-parser/issues/421"}],"remediation":[],"revision":"9379fc637096124f276232065b96f13d0db98dca8e8a96c331fc2cbbaa9561f5","sources":[{"modifiedAt":1793609033306,"name":"CNA: VulDB","retrievedAt":1793610521071,"url":"https://www.cve.org/CVERecord?id=CVE-2026-15195"},{"modifiedAt":1793611056773,"name":"NVD","retrievedAt":1793621749488,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15195"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793610530999,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-15195"}],"ssvc":{"assessedAt":1783621376575,"automatable":"no","exploitation":"poc","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"apidevtools json-schema-ref-parser pointer.ts Pointer.set prototype pollution","updatedAt":1793621749488}