{"action":"Upgrade json-pointer to 0.6.2 or later.","affected":[{"fixed":"0.6.2","introduced":"0"}],"component":"json-pointer","cve_ids":["CVE-2022-4742"],"ecosystem":"npm","epss":0.01099,"exploited":false,"fixed_versions":["0.6.2"],"ghsa_id":"GHSA-6xrf-q977-5vgc","id":"tcs_01M5KF8AVASY1538XNE4W1CFY4","modified_at":"2024-04-04T13:49:56Z","published_at":"2022-12-26T09:30:25Z","references":["https://osv.dev/vulnerability/GHSA-6xrf-q977-5vgc","https://nvd.nist.gov/vuln/detail/CVE-2022-4742","https://github.com/manuelstofer/json-pointer/pull/36","https://github.com/manuelstofer/json-pointer/commit/859c9984b6c407fc2d5a0a7e47c7274daa681941","https://github.com/manuelstofer/json-pointer","https://vuldb.com/?ctiid.216794","https://vuldb.com/?id.216794"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-6xrf-q977-5vgc","url":"https://osv.dev/vulnerability/GHSA-6xrf-q977-5vgc"}],"summary":"json-pointer vulnerable to Prototype Pollution"}