logo

Database

Prototype Pollution In json-pointer

Description

Prototype Pollution in json-pointer This affects versions of package json-pointer up to and including 0.6.1. A type confusion vulnerability can lead to a bypass of CVE-2020-7709 when the pointer components are arrays.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2021-238202. NVD-2021-238203. OSV-2021-238204. GCVE-2021-23820

References

1. https://github.com/manuelstofer/json-pointer/pull/362. https://github.com/manuelstofer/json-pointer/commit/931b0f9c7178ca09778087b4b0ac7e4f505620c23. https://github.com/manuelstofer/json-pointer/blob/master/index.js%23L78

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.