By default JSON Schema allows additional properties, which can potentially lead to mass assignment issues, where unspecified fields are passed to the API without validation. Disable them with additionalProperties set to false or add maxProperties.
OWASP API3 2023 No Additional Properties
Message: If the additionalProperties keyword is used it must be set to false.
