json-pointer (npm) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package json-pointer, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (3)

• CVE-2022-4742 — CVSS 6.3 (medium): A vulnerability, which was classified as critical, has been found in json-pointer up to 0.6.1. Affected by this issue is the function set…
• CVE-2020-7709 — CVSS 6.0 (medium): This affects the package json-pointer before 0.6.1. Multiple reference of object using slash is supported.
• CVE-2021-23820 — CVSS 5.6 (medium): This affects all versions of package json-pointer. A type confusion vulnerability can lead to a bypass of CVE-2020-7709 when the pointer…