Skip to content

Product

starcounter-jack json-patch vulnerabilities

2 published CVES affecting starcounter-jack json-patch, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
1
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest starcounter-jack json-patch CVEs

Newest publication first

  1. CVE-2021-4279 Starcounter-Jack JSON-Patch prototype pollution

    Published
    CriticalCVSS 9.8

    A vulnerability has been found in Starcounter-Jack JSON-Patch up to 3.1.0 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to improperly controlled modification of object prototype attributes ('prototype pollution'). The attack can be...

  2. CVE-2018-14632 JSON-Patch Out-of-bounds Write vulnerability

    Published
    HighCVSS 7.7 EPSS 2.2%

    An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Openshift master api service which provides cluster management...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.