Vulnerability Database · Debian · node-json5 · Version
node-json5 2.1.3-2
2.1.3-2 is affected by 2 vulnerabilities.
The vulnerabilities that cover this exact version are listed below with the fixed version to move to.
Critical 0 High 1 Medium 0 Low 0 Unrated 1
-
Database updated 23/Oct/2026
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Vulnerabilities affecting this version
node-json5 2.1.3-2 vulnerabilities
2 vulnerabilities cover node-json5 2.1.3-2. Open the full list in the database.
| Vulnerability | Severity | Fixed version | Disclosed |
|---|---|---|---|
| Prototype Pollution Vulnerability in JSON5 Package | 8.8 high | 2.1.3-2+deb11u1 | 24 Dec 2022 |
| Prototype Pollution Vulnerability in node-json5 Package | N/A unrated | 2.1.3-2+deb11u1 | 24 Dec 2022 |
Looking for another version, or everything Vulert holds for node-json5?
Questions
About node-json5 2.1.3-2
Is node-json5 2.1.3-2 vulnerable?
Yes. 2 vulnerabilities in the Vulert database cover node-json5 2.1.3-2: 0 critical, 1 high, 0 medium and 0 low, plus 1 not yet rated. Each entry above names the fixed version to move to.
How do I monitor node-json5 for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the node-json5 version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.