CVE-2021-23807

CVE-2021-23807 affects the jsonpointer package (pre-5.0.0). Description: a type confusion vulnerability can bypass a prior Prototype Pollution fix when pointer components are arrays, potentially enabling arbitrary code execution or denial of service via crafted inputs. Affected products/contexts ...