{"action":"Upgrade json-ptr to 2.1.0 or later.","affected":[{"fixed":"2.1.0","introduced":"0"}],"component":"json-ptr","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["2.1.0"],"ghsa_id":"GHSA-rrqv-vjrw-hrcr","id":"tcs_01M5KG9T4KVNJCJ51P1NJEB6SH","modified_at":"2021-05-26T19:57:10Z","published_at":"2021-05-26T19:59:19Z","references":["https://osv.dev/vulnerability/GHSA-rrqv-vjrw-hrcr","https://github.com/418sec/json-ptr/pull/3","https://github.com/flitbit/json-ptr/blob/456a1728b45c8663bb1ac20a249c5fb17495ec6b/README.md#security-vulnerability-prior-to-v210","https://github.com/flitbit/json-ptr/blob/master/src/util.ts%23L174","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1038396","https://snyk.io/vuln/SNYK-JS-JSONPTR-1016939","https://www.huntr.dev/bounties/2-npm-json-ptr","https://www.npmjs.com/advisories/1706","https://www.npmjs.com/package/json-ptr"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-rrqv-vjrw-hrcr","url":"https://osv.dev/vulnerability/GHSA-rrqv-vjrw-hrcr"}],"summary":"Arbitrary Code Execution in json-ptr"}