Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

Contact© 2026 Release Alert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

© 2026 Release Alert

Privacy Policy
Terms of Service
Contact

CVE-2022-33154 — MEDIUM severity vulnerability | Release Alert

CVE-2022-33154

5.4

MEDIUMCVSS v3

Published

July 12, 2022

CVSS v2

3.5 LOW

Affected

12 projects

Assigned by

MITRE

Severity scale

010

Description

The schema (aka Embedding schema.org vocabulary) extension before 1.13.1 and 2.x before 2.5.1 for TYPO3 allows XSS.

@istanbuljs/schema

NPMSchemas describing various structures used by nyc and istanbuljs

>= 2.0.0, < 2.5.1, < 1.13.1NVD

istanbuljs/schema

GitHubSchemas describing various structures used by nyc and istanbuljs

>= 2.0.0, < 2.5.1, < 1.13.1NVD

@graphql-tools/schema

More on this CVE

NVD↗GitHub Advisory↗

NPM

A set of utils for faster development of GraphQL tools

>= 2.0.0, < 2.5.1, < 1.13.1NVD

@graphql-toolkit/schema

NPMA set of utils for faster development of GraphQL tools

>= 2.0.0, < 2.5.1, < 1.13.1NVD

NPMNuxt types and default configuration

>= 2.0.0, < 2.5.1, < 1.13.1NVD

NPMScalable, strongly typed GraphQL schema development

>= 2.0.0, < 2.5.1, < 1.13.1NVD

@heroku-cli/schema

NPM # Usage  # Commands

>= 2.0.0, < 2.5.1, < 1.13.1NVD

@feathersjs/schema

NPMA common data schema definition format

>= 2.0.0, < 2.5.1, < 1.13.1NVD

NPMAppium Configuration Schema

>= 2.0.0, < 2.5.1, < 1.13.1NVD

@loaders.gl/schema

NPMTable format APIs for JSON, CSV, etc...

>= 2.0.0, < 2.5.1, < 1.13.1NVD

GitHubJSON schema for Vega and Vega-Lite

>= 2.0.0, < 2.5.1, < 1.13.1NVD

GitHubPackage gorilla/schema fills a struct with form values.

>= 2.0.0, < 2.5.1, < 1.13.1NVD