{"action":"Upgrade json-ptr to 3.0.0 or later.","affected":[{"fixed":"3.0.0","introduced":"0"}],"component":"json-ptr","cve_ids":["CVE-2021-23509"],"ecosystem":"npm","epss":0.01828,"exploited":false,"fixed_versions":["3.0.0"],"ghsa_id":"GHSA-8gwj-8hxc-285w","id":"tcs_01M5KFCZYJ7QGBK6DV4JMFVPG0","modified_at":"2025-01-14T09:12:03.022963Z","published_at":"2021-11-08T17:43:27Z","references":["https://osv.dev/vulnerability/GHSA-8gwj-8hxc-285w","https://nvd.nist.gov/vuln/detail/CVE-2021-23509","https://github.com/flitbit/json-ptr/pull/42","https://github.com/flitbit/json-ptr/commit/5dc458fbad1c382a2e3ca6d62e66ede3d92849ca","https://github.com/flitbit/json-ptr","https://github.com/flitbit/json-ptr%23security-vulnerabilities-resolved","https://snyk.io/vuln/SNYK-JS-JSONPTR-1577291"],"severity":{"label":"medium","score":5.6},"sources":[{"source":"osv","source_id":"GHSA-8gwj-8hxc-285w","url":"https://osv.dev/vulnerability/GHSA-8gwj-8hxc-285w"}],"summary":"Prototype Pollution in json-ptr"}