{"action":"Upgrade json-pointer to 0.6.2 or later.","affected":[{"fixed":"0.6.2","introduced":"0"}],"component":"json-pointer","cve_ids":["CVE-2021-23820"],"ecosystem":"npm","epss":0.01873,"exploited":false,"fixed_versions":["0.6.2"],"ghsa_id":"GHSA-v5vg-g7rq-363w","id":"tcs_01M5KGAVK0T0JRAHT7BSVQXQQA","modified_at":"2026-09-10T03:49:16.207096403Z","published_at":"2021-11-08T17:40:49Z","references":["https://osv.dev/vulnerability/GHSA-v5vg-g7rq-363w","https://nvd.nist.gov/vuln/detail/CVE-2021-23820","https://github.com/manuelstofer/json-pointer/pull/36","https://github.com/manuelstofer/json-pointer/commit/931b0f9c7178ca09778087b4b0ac7e4f505620c2","https://github.com/manuelstofer/json-pointer","https://github.com/manuelstofer/json-pointer/blob/master/index.js%23L78","https://snyk.io/vuln/SNYK-JS-JSONPOINTER-1577287"],"severity":{"label":"medium","score":5.6},"sources":[{"source":"osv","source_id":"GHSA-v5vg-g7rq-363w","url":"https://osv.dev/vulnerability/GHSA-v5vg-g7rq-363w"}],"summary":"Prototype Pollution in json-pointer"}