CVE-2021-4279
1 advisory.
npm/fast-json-patch CVE-2021-4279: high 7.3
Starcounter-Jack JSON-Patch Prototype Pollution vulnerability
Action: Upgrade fast-json-patch to 3.1.1 or later.
npm i fast-json-patch@3.1.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.1.1 | - |
Fixed versions
| 3.1.1 |
Sources
- osv: GHSA-8gh8-hqwg-xf34
- https://nvd.nist.gov/vuln/detail/CVE-2021-4279
- https://github.com/Starcounter-Jack/JSON-Patch/pull/262
- https://github.com/Starcounter-Jack/JSON-Patch/commit/7ad6af41eabb2d799f698740a91284d762c955c9
- https://blog.effectrenan.com/pwn2win-2021-illusion-web-challenge
- https://github.com/Starcounter-Jack/JSON-Patch
- https://github.com/Starcounter-Jack/JSON-Patch/releases/tag/3.1.1
- https://vuldb.com/?ctiid.216778
- https://vuldb.com/?id.216778
- https://www.huntr.dev/bounties/1-npm-fast-json-patch
CVE-2021-4279 · published · modified · JSON