Medium severity5.6NVD Advisory· Published Nov 3, 2021· Updated Jun 17, 2026
CVE-2021-23820
CVE-2021-23820
Description
This affects all versions of package json-pointer. A type confusion vulnerability can lead to a bypass of CVE-2020-7709 when the pointer components are arrays.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
json-pointernpm | < 0.6.2 | 0.6.2 |
Affected products
23- json-pointer/json-pointerdescription
- osv-coords21 versionspkg:apk/chainguard/py3-jsonpointerpkg:apk/chainguard/py3-supported-jsonpointerpkg:apk/chainguard/py3.10-jsonpointerpkg:apk/chainguard/py3.10-jsonpointer-binpkg:apk/chainguard/py3.11-jsonpointerpkg:apk/chainguard/py3.11-jsonpointer-binpkg:apk/chainguard/py3.12-jsonpointerpkg:apk/chainguard/py3.12-jsonpointer-binpkg:apk/chainguard/py3.13-jsonpointerpkg:apk/chainguard/py3.13-jsonpointer-binpkg:apk/wolfi/py3-jsonpointerpkg:apk/wolfi/py3-supported-jsonpointerpkg:apk/wolfi/py3.10-jsonpointerpkg:apk/wolfi/py3.10-jsonpointer-binpkg:apk/wolfi/py3.11-jsonpointerpkg:apk/wolfi/py3.11-jsonpointer-binpkg:apk/wolfi/py3.12-jsonpointerpkg:apk/wolfi/py3.12-jsonpointer-binpkg:apk/wolfi/py3.13-jsonpointerpkg:apk/wolfi/py3.13-jsonpointer-binpkg:npm/json-pointer
< 0+ 20 more
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0.6.2
Patches
Vulnerability mechanics
References
7- snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1910686nvdExploitMitigationPatchThird Party AdvisoryVDB Entry
- snyk.io/vuln/SNYK-JS-JSONPOINTER-1577287nvdExploitMitigationPatchThird Party AdvisoryVDB EntryWEB
- github.com/advisories/GHSA-v5vg-g7rq-363wghsaADVISORY
- github.com/manuelstofer/json-pointer/blob/master/index.js%23L78nvdThird Party AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2021-23820ghsaADVISORY
- github.com/manuelstofer/json-pointer/commit/931b0f9c7178ca09778087b4b0ac7e4f505620c2ghsaWEB
- github.com/manuelstofer/json-pointer/pull/36ghsaWEB
News mentions
0No linked articles in our index yet.