CVE-2021-23820
Prototype Pollution in json-pointer
Summary
Prototype Pollution in json-pointer
Original description
The description as published by the source.
This affects versions of package json-pointer up to and including 0.6.1. A type confusion vulnerability can lead to a bypass of CVE-2020-7709 when the pointer components are arrays.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
npm
json-pointer
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.6.2"}]}]
References
- advisory nvd.nist.gov
- package github.com
- web github.com
- web github.com
- web github.com
- web snyk.io