CVE-2021-23509

Name of the Vulnerable Software and Affected Versions json-ptr versions prior to 3.0.0

Description A type confusion issue can lead to a bypass when user-provided keys used in the pointer parameter are arrays. This issue is related to the json-ptr package.

Recommendations For versions prior to 3.0.0, update to version 3.0.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of array values for the pointer parameter until a patch is applied.