Medium severity5.6NVD Advisory· Published Nov 3, 2021· Updated Jun 17, 2026
CVE-2021-23807
CVE-2021-23807
Description
This affects the package jsonpointer before 5.0.0. A type confusion vulnerability can lead to a bypass of a previous Prototype Pollution fix when the pointer components are arrays.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
jsonpointernpm | < 5.0.0 | 5.0.0 |
org.webjars.npm:json-pointernpm | < 5.0.0 | 5.0.0 |
Affected products
24- jsonpointer/jsonpointerdescription
- osv-coords22 versionspkg:apk/chainguard/py3-jsonpointerpkg:apk/chainguard/py3-supported-jsonpointerpkg:apk/chainguard/py3.10-jsonpointerpkg:apk/chainguard/py3.10-jsonpointer-binpkg:apk/chainguard/py3.11-jsonpointerpkg:apk/chainguard/py3.11-jsonpointer-binpkg:apk/chainguard/py3.12-jsonpointerpkg:apk/chainguard/py3.12-jsonpointer-binpkg:apk/chainguard/py3.13-jsonpointerpkg:apk/chainguard/py3.13-jsonpointer-binpkg:apk/wolfi/py3-jsonpointerpkg:apk/wolfi/py3-supported-jsonpointerpkg:apk/wolfi/py3.10-jsonpointerpkg:apk/wolfi/py3.10-jsonpointer-binpkg:apk/wolfi/py3.11-jsonpointerpkg:apk/wolfi/py3.11-jsonpointer-binpkg:apk/wolfi/py3.12-jsonpointerpkg:apk/wolfi/py3.12-jsonpointer-binpkg:apk/wolfi/py3.13-jsonpointerpkg:apk/wolfi/py3.13-jsonpointer-binpkg:npm/jsonpointerpkg:npm/org.webjars.npm:json-pointer
< 3.0.0-r0+ 21 more
- (no CPE)range: < 3.0.0-r0
- (no CPE)range: < 3.0.0-r0
- (no CPE)range: < 3.0.0-r0
- (no CPE)range: < 3.0.0-r0
- (no CPE)range: < 3.0.0-r0
- (no CPE)range: < 3.0.0-r0
- (no CPE)range: < 3.0.0-r0
- (no CPE)range: < 3.0.0-r0
- (no CPE)range: < 3.0.0-r0
- (no CPE)range: < 3.0.0-r0
- (no CPE)range: < 3.0.0-r0
- (no CPE)range: < 3.0.0-r0
- (no CPE)range: < 3.0.0-r0
- (no CPE)range: < 3.0.0-r0
- (no CPE)range: < 3.0.0-r0
- (no CPE)range: < 3.0.0-r0
- (no CPE)range: < 3.0.0-r0
- (no CPE)range: < 3.0.0-r0
- (no CPE)range: < 3.0.0-r0
- (no CPE)range: < 3.0.0-r0
- (no CPE)range: < 5.0.0
- (no CPE)range: < 5.0.0
Patches
Vulnerability mechanics
References
6- github.com/janl/node-jsonpointer/commit/a0345f3550cd9c4d89f33b126390202b89510ad4nvdPatchThird Party AdvisoryWEB
- github.com/janl/node-jsonpointer/pull/51nvdPatchThird Party AdvisoryWEB
- snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1910273nvdExploitMitigationPatchThird Party AdvisoryVDB EntryWEB
- snyk.io/vuln/SNYK-JS-JSONPOINTER-1577288nvdExploitMitigationPatchThird Party AdvisoryVDB EntryWEB
- github.com/advisories/GHSA-282f-qqgm-c34qghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2021-23807ghsaADVISORY
News mentions
0No linked articles in our index yet.