ajv.js has 1 CVE on record. The median CVSS is 2.9 (low).

CVEs per month

Last 12 months, by publish date

1025/101125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/09

Exploited share: 0% vs 1% corpus
Median CVSS: 2.9
Publish → KEV: —
Last 90 days: 0 prev 0

Weakness classes

Products

ajv 1

Follow ajv.js:RSS feed Save a search →Embed badge ↗

1

Total CVEs

0

Critical

0

CISA KEV

0

Exploited

Worst active — by depth score

CVE-2025-69873Low· 2.9ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the $data option is enabled28

ajv.js vulnerabilities

CVEs affecting ajv.js, newest first. Open any entry for full detail, references, and exploit status.

1 CVERSS

CVE-2025-69873Low· 2.9PoC

ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the $data option is enabled

ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the $data option is enabled. The pattern keyword accepts runtime data via JSON Pointer syntax ($data reference), which i…

▾ Twilightajv.js · ajvEPSS 0.50%via NVD

ajv.js vulnerabilities (CVEs) · VulnSea