Description
This affects the package json-pointer before 0.6.1. Multiple reference of object using slash is supported.
Recommendation
Update the json-pointer package to the latest compatible version. Followings are version details:
- Affected version(s): < 0.6.1
- Patched version(s): 0.6.1
References
Could your website be exposed too?
SmartScanner can check your website for Prototype pollution in json-pointer - json-pointer and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Prototype Pollution in json-pointer - CVE-2021-23820
- json-pointer vulnerable to Prototype Pollution - CVE-2022-4742
- Prototype pollution in @tsed/core - CVE-2020-7748
- Prototype Pollution in lodash - lodash - GHSA-p6mc-m468-83gw - CVE-2020-8203
You might also like:
See something that needs correcting? Let us knowUpdated March 05, 2025


