GHSA-2g4f-4pwh-qvx6
NoneCVSS
—
EPSS
—
Published
Feb 11, 2026
CISA due date
—
The record
ajv has ReDoS when using `$data` option
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | ajv | 0 | 6.14.0 |
| npm | ajv | 7.0.0-alpha.0 | 8.18.0 |
| Chainguard | arangodb-3.11 | 0 | 3.11.14.3-r0 |
| Chainguard | arangodb-3.12 | 0 | 3.12.7.2-r2 |
| Chainguard | argo-workflows-ui-3.6 | 0 | 3.6.19-r2 |
| Chainguard | argo-workflows-ui-3.7 | 0 | 3.7.10-r3 |
| Chainguard | argo-workflows-ui-4.0 | 0 | 4.0.1-r2 |
| Chainguard | eslint | 0 | 10.0.2-r0 |
| Chainguard | kibana-8.19 | 0 | 8.19.13-r0 |
| Chainguard | kibana-8.19-bitnami | 0 | 8.19.13-r0 |
| Chainguard | kibana-8.19-iamguarded | 0 | 8.19.13-r0 |
| Chainguard | kibana-9.2 | 0 | 9.2.7-r0 |
| Chainguard | kibana-9.2-iamguarded | 0 | 9.2.7-r0 |
| Chainguard | kibana-9.3 | 0 | 9.3.2-r0 |
| Chainguard | kibana-9.3-iamguarded | 0 | 9.3.2-r0 |
| Chainguard | kubeflow-centraldashboard | 0 | 1.10.0-r12 |
| Chainguard | kubeflow-pipelines-frontend | 0 | 2.15.0-r12 |
| Chainguard | langfuse-2 | 0 | 2.95.12-r10 |
| Chainguard | langfuse-2-worker | 0 | 2.95.12-r10 |
| Chainguard | langfuse-3 | 0 | 3.155.1-r2 |
| Chainguard | langfuse-3-worker | 0 | 3.155.1-r2 |
| Chainguard | langfuse-fips-2 | 0 | 2.95.12-r15 |
| Chainguard | langfuse-fips-2-worker | 0 | 2.95.12-r15 |
| Chainguard | langfuse-fips-3 | 0 | 3.155.1-r1 |
| Chainguard | langfuse-fips-3-worker | 0 | 3.155.1-r1 |
| Chainguard | librechat | 0 | 0.8.2-r4 |
| Chainguard | opensearch-dashboards-2 | 0 | 2.19.4-r15 |
| Chainguard | opensearch-dashboards-2-dashboards-observability | 0 | 2.19.4-r11 |
| Chainguard | opensearch-dashboards-2-fips-dashboards-observability | 0 | 2.19.4-r11 |
| Chainguard | opensearch-dashboards-3 | 0 | 3.5.0-r6 |
| Chainguard | opensearch-dashboards-3-dashboards-observability | 0 | 3.5.0-r5 |
| Chainguard | opensearch-dashboards-3-fips-dashboards-observability | 0 | 3.5.0-r3 |
| Chainguard | prism | 0 | 5.14.3-r7 |
| Chainguard | renovate | 0 | 43.38.0-r1 |
| Chainguard | serve | 0 | 14.2.6-r0 |
| Chainguard | tileserver-gl | 0 | 5.5.0-r5 |
| Chainguard | tileserver-gl-fips | 0 | 5.5.0-r6 |
| Chainguard | vitess-22 | 0 | 22.0.3-r2 |
| Chainguard | vitess-23 | 0 | 23.0.2-r1 |
| Chainguard | wazuh-dashboard | 0 | 4.14.4-r1 |
| Wolfi | argo-workflows-ui-3.7 | 0 | 3.7.10-r3 |
| Wolfi | argo-workflows-ui-4.0 | 0 | 4.0.1-r2 |
| Wolfi | eslint | 0 | 10.0.2-r0 |
| Wolfi | kubeflow-centraldashboard | 0 | 1.10.0-r12 |
| Wolfi | kubeflow-pipelines-frontend | 0 | 2.15.0-r12 |
| Wolfi | langfuse-3 | 0 | 3.155.1-r2 |
| Wolfi | langfuse-3-worker | 0 | 3.155.1-r2 |
| Wolfi | opensearch-dashboards-2 | 0 | 2.19.4-r15 |
| Wolfi | opensearch-dashboards-2-dashboards-observability | 0 | 2.19.4-r11 |
| Wolfi | opensearch-dashboards-3 | 0 | 3.5.0-r6 |
| Wolfi | opensearch-dashboards-3-dashboards-observability | 0 | 3.5.0-r5 |
| Wolfi | prism | 0 | 5.14.3-r7 |
| Wolfi | renovate | 0 | 43.38.0-r1 |
| Wolfi | serve | 0 | 14.2.6-r0 |
| Wolfi | tileserver-gl | 0 | 5.5.0-r5 |
| Wolfi | vitess-22 | 0 | 22.0.3-r2 |
| Wolfi | vitess-23 | 0 | 23.0.2-r1 |
Related vulnerabilities
- CVE-2025-69873 ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression… Same vulnerability
- GHSA-r5fr-rjxr-66jc lodash vulnerable to Code Injection via `_.template` imports key names Also affects arangodb-3.11
- GHSA-f23m-r3pf-42rh lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit` Also affects arangodb-3.11
- CVE-2026-4800 Impact: The fix for CVE-2021-23337 (https://github.com/advisories/GHSA-35jh-r3h4-6jhm)… Also affects arangodb-3.11
- CVE-2026-2950 Impact: Lodash versions 4.17.23 and earlier are vulnerable to prototype pollution in the… Also affects arangodb-3.11
- CVE-2026-33228 flatted is a circular JSON parser. Also affects arangodb-3.11
- GHSA-rf6f-7fwh-wjgh Prototype Pollution via parse() in NodeJS flatted Also affects arangodb-3.11
- GHSA-25h7-pfq9-p65f flatted vulnerable to unbounded recursion DoS in parse() revive phase Also affects arangodb-3.11