This affects the package json-pointer before 0.6.1. Multiple reference of object using slash is supported.
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-1321,
Products Affected
