{"action":"Upgrade json-ptr to 2.1.0 or later.","affected":[{"fixed":"2.1.0","introduced":"0"}],"component":"json-ptr","cve_ids":["CVE-2020-7766"],"ecosystem":"npm","exploited":false,"fixed_versions":["2.1.0"],"ghsa_id":"GHSA-x5r6-x823-9848","id":"tcs_01M5KGH2ERTX38BKKXMBGJSJCV","modified_at":"2025-01-14T08:57:19.814698Z","published_at":"2021-05-10T19:15:43Z","references":["https://osv.dev/vulnerability/GHSA-x5r6-x823-9848","https://nvd.nist.gov/vuln/detail/CVE-2020-7766","https://github.com/418sec/json-ptr/pull/3","https://github.com/flitbit/json-ptr/commit/2539e3494c80af1eef24f0f433654a61f255f011","https://github.com/flitbit/json-ptr/blob/master/src/util.ts%23L174","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1038396","https://snyk.io/vuln/SNYK-JS-JSONPTR-1016939","https://www.huntr.dev/bounties/2-npm-json-ptr","https://www.npmjs.com/package/json-ptr"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-x5r6-x823-9848","url":"https://osv.dev/vulnerability/GHSA-x5r6-x823-9848"}],"summary":"Arbitrary Code Execution in json-ptr"}