CVE-2021-23820
Prototype Pollution in json-pointer
Résumé
Prototype Pollution in json-pointer
Description d'origine
La description telle que publiée par la source (souvent en anglais).
This affects versions of package json-pointer up to and including 0.6.1. A type confusion vulnerability can lead to a bypass of CVE-2020-7709 when the pointer components are arrays.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
npm
json-pointer
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.6.2"}]}]
Références
- advisory nvd.nist.gov
- package github.com
- web github.com
- web github.com
- web github.com
- web snyk.io