VDB
Sign up
MEDIUM5.6

GHSA-282f-qqgm-c34q

Prototype Pollution in node-jsonpointer

Quick fix

GHSA-282f-qqgm-c34q — jsonpointer: upgrade to the fixed version with the command below.

npm install jsonpointer@5.0.0

Details

This affects the package `jsonpointer` before `5.0.0`. A type confusion vulnerability can lead to a bypass of a previous Prototype Pollution fix when the pointer components are arrays.

Are you affected?

Enter the version of the package you're using.

Affected packages

npm/jsonpointer
Introduced in: 0Fixed in: 5.0.0
Fixnpm install jsonpointer@5.0.0
npm/org.webjars.npm:json-pointer
Introduced in: 0Fixed in: 5.0.0
Fixnpm install org.webjars.npm:json-pointer@5.0.0

References