Description
A vulnerability has been found in Starcounter-Jack JSON-Patch up to 3.1.0 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to improperly controlled modification of object prototype attributes (‘prototype pollution’). The attack can be initiated remotely.
Recommendation
Update the fast-json-patch package to the latest compatible version. Followings are version details:
- Affected version(s): < 3.1.1
- Patched version(s): 3.1.1
References
Could your website be exposed too?
SmartScanner can check your website for Starcounter-Jack JSON-Patch Prototype Pollution vulnerability and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Prototype Pollution Vulnerability in object-collider - CVE-2021-25914
- Prototype Pollution in json-pointer - CVE-2021-23820
- Prototype pollution vulnerability in 'patchmerge - CVE-2021-25916
- Prototype pollution vulnerability in js-extend - CVE-2021-25945
You might also like:
See something that needs correcting? Let us knowUpdated March 01, 2024