diff --git a/2021/23xxx/CVE-2021-23419.json b/2021/23xxx/CVE-2021-23419.json index e3860c25d02..5f09a1d4663 100644 --- a/2021/23xxx/CVE-2021-23419.json +++ b/2021/23xxx/CVE-2021-23419.json @@ -48,12 +48,14 @@ "references": { "reference_data": [ { - "refsource": "CONFIRM", - "url": "https://snyk.io/vuln/SNYK-JS-OPENGRAPH-1536747" + "refsource": "MISC", + "url": "https://snyk.io/vuln/SNYK-JS-OPENGRAPH-1536747", + "name": "https://snyk.io/vuln/SNYK-JS-OPENGRAPH-1536747" }, { - "refsource": "CONFIRM", - "url": "https://github.com/samholmes/node-open-graph/commit/a0cef507a90adaac7dbbe9c404f09a50bdefb348" + "refsource": "MISC", + "url": "https://github.com/samholmes/node-open-graph/commit/a0cef507a90adaac7dbbe9c404f09a50bdefb348", + "name": "https://github.com/samholmes/node-open-graph/commit/a0cef507a90adaac7dbbe9c404f09a50bdefb348" } ] }, @@ -61,7 +63,7 @@ "description_data": [ { "lang": "eng", - "value": "This affects the package open-graph before 0.2.6.\n The function parse could be tricked into adding or modifying properties of Object.prototype using a __proto__ or constructor payload.\r\n\r\n" + "value": "This affects the package open-graph before 0.2.6. The function parse could be tricked into adding or modifying properties of Object.prototype using a __proto__ or constructor payload." } ] },