Skip to content
OpenAdvisories
Medium · 6.0 CVE-2020-7709 EUVD-2021-1001GHSA-7mg4-w3w5-x5pc

Prototype Pollution

Published Oct 5, 2020 · Updated Sep 16, 2024 · Assigned by snyk

Description

This affects the package json-pointer before 0.6.1. Multiple reference of object using slash is supported.

Affected products

VendorProductAffectedFixed
— json-pointer unspecified – < 0.6.1 0.6.1

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.webjars.npm:json-pointer < 0.6.1 0.6.1 GHSA-7mg4-w3w5-x5pc
npm json-pointer < 0.6.1 0.6.1 GHSA-7mg4-w3w5-x5pc

References