Lucene search

K
osvGoogleOSV:GHSA-282F-QQGM-C34Q
HistoryNov 08, 2021 - 5:44 p.m.

Prototype Pollution in node-jsonpointer

2021-11-0817:44:45
Google
osv.dev
23
prototype pollution
jsonpointer
vulnerability

EPSS

0.17

Percentile

96.1%

This affects the package jsonpointer before 5.0.0. A type confusion vulnerability can lead to a bypass of a previous Prototype Pollution fix when the pointer components are arrays.

EPSS

0.17

Percentile

96.1%