CVE-2021-23820

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2021-23820

CGA ID

CGA-9rcr-vx7f-4qqj

Severity

5.6

Medium

CVSS V3

Summary

Prototype Pollution in json-pointer

Description

This affects versions of package json-pointer up to and including 0.6.1. A type confusion vulnerability can lead to a bypass of CVE-2020-7709 when the pointer components are arrays.

References

Affected packages

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™

Media Kit Contact Us

Private Policy

CVE-2021-23820

Severity

Summary

Description

References

Affected packages

Product

Why Chainguard

Customers

Company

Resources