Lucene search

K
osvGoogleOSV:CVE-2021-23807
HistoryNov 03, 2021 - 6:15 p.m.

CVE-2021-23807

2021-11-0318:15:08
Google
osv.dev
6
type confusion
jsonpointer package
prototype pollution

AI Score

6.6

Confidence

Low

EPSS

0.17

Percentile

96.1%

This affects the package jsonpointer before 5.0.0. A type confusion vulnerability can lead to a bypass of a previous Prototype Pollution fix when the pointer components are arrays.

AI Score

6.6

Confidence

Low

EPSS

0.17

Percentile

96.1%