"-Synchronized-Data."

This commit is contained in:
CVE Team 2020-11-12 11:01:44 +00:00
parent 50bbab8cd0
commit 97c1fe4b7c
No known key found for this signature in database
GPG Key ID: 5708902F06FEF743

View File

@ -48,12 +48,14 @@
"references": {
"reference_data": [
{
"refsource": "CONFIRM",
"url": "https://snyk.io/vuln/SNYK-JS-JSON8-1017116"
"refsource": "MISC",
"url": "https://snyk.io/vuln/SNYK-JS-JSON8-1017116",
"name": "https://snyk.io/vuln/SNYK-JS-JSON8-1017116"
},
{
"refsource": "CONFIRM",
"url": "https://github.com/sonnyp/JSON8/commit/2e890261b66cbc54ae01d0c79c71b0fd18379e7e"
"refsource": "MISC",
"url": "https://github.com/sonnyp/JSON8/commit/2e890261b66cbc54ae01d0c79c71b0fd18379e7e",
"name": "https://github.com/sonnyp/JSON8/commit/2e890261b66cbc54ae01d0c79c71b0fd18379e7e"
}
]
},
@ -61,7 +63,7 @@
"description_data": [
{
"lang": "eng",
"value": "This affects the package json8 before 1.0.3.\n The function adds in the target object the property specified in the path, however it does not properly check the key being set, leading to a prototype pollution.\n"
"value": "This affects the package json8 before 1.0.3. The function adds in the target object the property specified in the path, however it does not properly check the key being set, leading to a prototype pollution."
}
]
},