{"action":"Upgrade org.webjars.npm:json-pointer to 0.6.1 or later.","affected":[{"fixed":"0.6.1","introduced":"0"}],"component":"org.webjars.npm:json-pointer","cve_ids":["CVE-2020-7709"],"ecosystem":"Maven","epss":0.01783,"exploited":false,"fixed_versions":["0.6.1"],"ghsa_id":"GHSA-7mg4-w3w5-x5pc","id":"tcs_01M5N8JNNGJFSMDBDC2986EWNM","modified_at":"2025-03-05T19:18:54.817231Z","published_at":"2021-05-10T18:37:47Z","references":["https://osv.dev/vulnerability/GHSA-7mg4-w3w5-x5pc","https://nvd.nist.gov/vuln/detail/CVE-2020-7709","https://github.com/manuelstofer/json-pointer/pull/34","https://github.com/manuelstofer/json-pointer/pull/34/files","https://github.com/manuelstofer/json-pointer","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-598862","https://snyk.io/vuln/SNYK-JS-JSONPOINTER-596925","https://www.npmjs.com/package/json-pointer"],"severity":{"label":"medium","score":6},"sources":[{"source":"osv","source_id":"GHSA-7mg4-w3w5-x5pc#Maven/org.webjars.npm:json-pointer","url":"https://osv.dev/vulnerability/GHSA-7mg4-w3w5-x5pc"}],"summary":"Prototype pollution in json-pointer"}