Json-Ptr Project: >> Json-Ptr >> 2.2.0 Security Vulnerabilities
This affects the package json-ptr before 3.0.0. A type confusion vulnerability can lead to a bypass of CVE-2020-7766 when the user-provided keys used in the pointer parameter are arrays.
CVSS Score
5.6
EPSS Score
0.017
Published
2021-11-03