{"metadata": {"vulnerability": "CVE-2020-7766", "count": 20, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 14}}, "data": [{"timestamp": "2020-01-21T00:00:00Z", "date_only": false, "value": "2020-01-21T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2020-7766", "field": "cveMetadata.dateReserved"}, {"timestamp": "2020-11-10T00:00:00Z", "date_only": false, "value": "2020-11-10T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / snyk", "record": "CVE-2020-7766", "field": "containers.cna.datePublic"}, {"timestamp": "2020-11-10T00:00:00Z", "date_only": true, "value": "2020-11-10", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2020-7766", "record": "GSD-2020-7766", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2020-11-10T15:33:00.131Z", "date_only": false, "value": "2020-11-10T15:33:00.131346Z", "kind": "other", "label": "DATE PUBLIC", "source": "cvelistv5 / snyk", "record": "CVE-2020-7766", "field": "containers.cna.x_legacyV4Record.CVE_data_meta.DATE_PUBLIC"}, {"timestamp": "2020-11-10T15:33:00.131Z", "date_only": false, "value": "2020-11-10T15:33:00.131346Z", "kind": "other", "label": "DATE PUBLIC", "source": "gsd \u00b7 GSD-2020-7766", "record": "GSD-2020-7766", "field": "namespaces.cve.org.CVE_data_meta.DATE_PUBLIC"}, {"timestamp": "2020-11-10T15:35:15Z", "date_only": false, "value": "2020-11-10T15:35:15.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / snyk", "record": "CVE-2020-7766", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2020-11-10T15:35:15.894Z", "date_only": false, "value": "2020-11-10T15:35:15.894Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-7766", "field": "cveMetadata.datePublished"}, {"timestamp": "2020-11-10T16:15:00Z", "date_only": false, "value": "2020-11-10T16:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-X5R6-X823-9848", "record": "GHSA-X5R6-X823-9848", "field": "database_specific.nvd_published_at"}, {"timestamp": "2020-11-10T16:15:00Z", "date_only": false, "value": "2020-11-10T16:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2020-7766", "record": "GSD-2020-7766", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2020-11-10T16:15:14.963Z", "date_only": false, "value": "2020-11-10T16:15:14.963", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-7766", "record": "FKIE_CVE-2020-7766", "field": "published"}, {"timestamp": "2020-11-10T18:27:25Z", "date_only": false, "value": "2020-11-10T18:27:25.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/16087", "record": "CVE-2020-7766", "field": "creation_timestamp", "uuid": "3bfcd91f-f42e-4b3d-b3ae-dba64a14cdbb", "content": "\u203c CVE-2020-7766 \u203c\n\nThis affects all versions of package json-ptr. The issue occurs in the set operation (https://flitbit.github.io/json-ptr/classes/_src_pointer_.jsonpointer.htmlset) when the force flag is set to true. The function recursively set the property in the target object, however it does not properly check the key being set, leading to a prototype pollution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/16087"}, {"timestamp": "2021-05-10T19:15:43Z", "date_only": false, "value": "2021-05-10T19:15:43Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-X5R6-X823-9848", "record": "GHSA-X5R6-X823-9848", "field": "published"}, {"timestamp": "2021-07-21T00:00:00Z", "date_only": true, "value": "2021-07-21", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2020-7766", "record": "GSD-2020-7766", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2021-11-03T21:23:16Z", "date_only": false, "value": "2021-11-03T21:23:16.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/31758", "record": "CVE-2020-7766", "field": "creation_timestamp", "uuid": "e43e5f37-697e-4852-89ac-aeebc26146a1", "content": "\u203c CVE-2021-23509 \u203c\n\nThis affects the package json-ptr before 3.0.0. A type confusion vulnerability can lead to a bypass of CVE-2020-7766 when the user-provided keys used in the pointer parameter are arrays.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/31758"}, {"timestamp": "2022-12-02T19:44:00Z", "date_only": false, "value": "2022-12-02T19:44Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2020-7766", "record": "GSD-2020-7766", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-09-05T22:44:45Z", "date_only": false, "value": "2023-09-05T22:44:45Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-X5R6-X823-9848", "record": "GHSA-X5R6-X823-9848", "field": "modified"}, {"timestamp": "2023-12-13T01:21:52.186Z", "date_only": false, "value": "2023-12-13T01:21:52.186423Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-7766", "record": "GSD-2020-7766", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-04T09:41:01.327Z", "date_only": false, "value": "2024-08-04T09:41:01.327Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2020-7766", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-16T22:14:07.645Z", "date_only": false, "value": "2024-09-16T22:14:07.645Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2020-7766", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-06-17T03:25:24.513Z", "date_only": false, "value": "2026-06-17T03:25:24.513", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-7766", "record": "FKIE_CVE-2020-7766", "field": "lastModified"}]}
