104 matches found
CVE-2021-23820
CVE-2021-23820 is a prototype pollution/type confusion vulnerability affecting all versions of the json-pointer package, with documented remediation path in the related advisory: vulnerable up to version 0.6.1. The root cause is a type confusion that can bypass CVE-2020-7709 when pointer componen...
CVE-2021-23820
This affects all versions of package json-pointer. A type confusion vulnerability can lead to a bypass of CVE-2020-7709 when the pointer components are arrays...
PT-2021-7248 · Npm · Json-Pointer
Name of the Vulnerable Software and Affected Versions: json-pointer versions up to and including 0.6.1 Description: A type confusion issue in the json-pointer package can lead to a bypass when the pointer components are arrays. This can potentially allow a remote attacker to execute arbitrary cod...
json-ptr 安全漏洞
Json-Ptr is a full implementation of Json pointer Rfc 6901 for Nodejs and modern browsers. a security vulnerability exists in Json-Ptr, which stems from a design or implementation impropriety in the code development process of a web system or product. No details of the vulnerability are currently...
json-pointer 安全漏洞
Json-Pointer is an open source, Rfc 6901 described by Manuel Stofer, a Swiss individual developer of some utilities for Json pointers. json-pointer has a security vulnerability that stems from improper design or implementation during the code development of a web-based system or product. No...
Prototype Pollution
Overview json-ptr is a complete implementation of JSON Pointer RFC 6901 for nodejs and modern browsers. Affected versions of this package are vulnerable to Prototype Pollution. A type confusion vulnerability can lead to a bypass of CVE-2020-7766 when the user-provided keys used in the pointer...
Prototype Pollution
Overview json-pointer is a set of utilities for JSON pointers described by RFC 6901 Affected versions of this package are vulnerable to Prototype Pollution. A type confusion vulnerability can lead to a bypass of CVE-2020-7709 when the pointer components are arrays. PoC const pointer =...
@amitport/koangular-users (0.0.0), @antimatter-studios/dredd (>=14.1.0, <=16.1.0) +205 more potentially affected by CVE-2020-7709 +2 more via json-pointer (>=0.0.4, <=0.6.1)
json-pointer NPM version =0.0.4, =14.1.0, =0.0.1, =0.0.2, =0.0.1, =1.2.6, =2.7.2, =1.0.0, =0.0.0-development, =1.0.0, =2.21.3, =9.0.0, =2.0.0, =0.0.1, =0.1.0 and more Source cves: CVE-2020-7709, CVE-2021-23820, CVE-2022-4742 Source advisory: SNYK:JS-JSONPOINTER-1577287...
Prototype Pollution
Overview json-pointer before 0.6.1 is vulnerable to prototype pollution. Multiple reference of object using slash is supported. Recommendation Upgrade to version 0.6.1 or later References - CVE - GitHub Advisory...
@amitport/koangular-users (0.0.0), @antimatter-studios/dredd (>=14.1.0, <=16.1.0) +201 more potentially affected by CVE-2020-7709 via json-pointer (>=0.0.4, <=0.6.0)
json-pointer NPM version =0.0.4, =14.1.0, =0.0.1, =0.0.2, =0.0.1, =1.2.6, =2.7.2, =1.0.0, =0.0.0-development, =1.0.0, =2.21.3, =0.1.0, =1.0.1 - ajv-moment 1.0.0 and more Source cves: CVE-2020-7709 Source advisory: OSV:GHSA-7MG4-W3W5-X5PC...
Prototype pollution in json-pointer
This affects the package json-pointer before 0.6.1. Multiple reference of object using slash is supported...
GHSA-7MG4-W3W5-X5PC Prototype pollution in json-pointer
This affects the package json-pointer before 0.6.1. Multiple reference of object using slash is supported...
Code Injection in flitbit/json-ptr
✍️ Description json-ptr is a complete implementation of JSON Pointer RFC 6901 for nodejs and modern browsers. JsonPointer.get that is designed to get the target object's value at the pointer's location is vulnerable to arbitrary code injection and exection, mainly due to the lack of sanitizing for...
Prototype Pollution
Overview json-ptr is a complete implementation of JSON Pointer RFC 6901 for nodejs and modern browsers. Affected versions of this package are vulnerable to Prototype Pollution. The issue occurs in the set operation https://flitbit.github.io/json-ptr/classes/srcpointer.jsonpointer.htmlset when the...
Prototype Pollution
json-pointer is vulnerable to prototype pollution. The vulnerability exists as it does not restrict the proto, constructor, and prototype header values to be set through the API...
CVE-2020-7709
This affects the package json-pointer before 0.6.1. Multiple reference of object using slash is supported...
CVE-2020-7709
This affects the package json-pointer before 0.6.1. Multiple reference of object using slash is supported...
Design/Logic Flaw
This affects the package json-pointer before 0.6.1. Multiple reference of object using slash is supported...
CVE-2020-7709
CVE-2020-7709 affects the json-pointer package prior to 0.6.1. A type confusion vulnerability occurs when pointer components are arrays, which can bypass the fix for CVE-2020-7709. The issue has been echoed downstream in related advisories (e.g., CVE-2021-23820) and is discussed in npm advisory e...
