| Package | Affected versions | Patched versions |
|---|---|---|
| json-pointer | < 0.6.2 | 0.6.2 |
| json-pointer | < 0.6.2 | 0.6.2 |
This affects versions of package json-pointer up to and including 0.6.1. A type confusion vulnerability can lead to a bypass of CVE-2020-7709 when the pointer components are arrays.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free