search

RocksonZeta / koa-validate

validate koa request params and format request params
https://github.com/RocksonZeta/koa-validate
MIT License
284 stars 32 forks source link

A type confusion vulnerability can lead in json-ptr #36

Open KumarRamesh08 opened 2 years ago

KumarRamesh08 commented 2 years ago

ERROR : This affects the package json-ptr before 3.0.0. A type confusion vulnerability can lead to a when the user-provided keys used in the pointer parameter are arrays.

json-ptr is dependency package for json-path version ^0.1.3 which is again a dependency package for Koa-validate package.