CVE-2021-23820
1 advisory.
npm/json-pointer CVE-2021-23820: medium 5.6, EPSS 1.87%
Prototype Pollution in json-pointer
Action: Upgrade json-pointer to 0.6.2 or later.
npm i json-pointer@0.6.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.6.2 | - |
Fixed versions
| 0.6.2 |
Sources
- osv: GHSA-v5vg-g7rq-363w
- https://nvd.nist.gov/vuln/detail/CVE-2021-23820
- https://github.com/manuelstofer/json-pointer/pull/36
- https://github.com/manuelstofer/json-pointer/commit/931b0f9c7178ca09778087b4b0ac7e4f505620c2
- https://github.com/manuelstofer/json-pointer
- https://github.com/manuelstofer/json-pointer/blob/master/index.js%23L78
- https://snyk.io/vuln/SNYK-JS-JSONPOINTER-1577287
CVE-2021-23820 · published · modified · JSON