Description
This affects the package json-pointer before 0.6.1. Multiple reference of object using slash is supported.
Remediation
References
https://github.com/manuelstofer/json-pointer/pull/34/files
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-598862
https://snyk.io/vuln/SNYK-JS-JSONPOINTER-596925
Related Vulnerabilities
CVE-2021-23568 Vulnerability in npm package extend2
CVE-2021-32859 Vulnerability in maven package org.webjars.npm:github-com-baremetrics-calendar
CVE-2020-13444 Vulnerability in maven package com.liferay:com.liferay.dynamic.data.mapping.service
CVE-2021-30638 Vulnerability in maven package org.apache.tapestry:tapestry-core
CVE-2023-32070 Vulnerability in maven package org.xwiki.rendering:xwiki-rendering-macro-html