CVE-2021-23807

Publication date

2021-11-03 17:20:29

Family

snyk

State

PUBLISHED

Description

This affects the package jsonpointer before 5.0.0. A type confusion vulnerability can lead to a bypass of a previous Prototype Pollution fix when the pointer components are arrays.