github_osv/GHSA-rrqv-vjrw-hrcr
Arbitrary Code Execution in json-ptr
There is a security vulnerability in `json-ptr` versions prior to v2.1.0 in which an unscrupulous actor may execute arbitrary code. If your code sends un-sanitized user input to json-ptr's .get() method, your project is vulnerable to this injection-style vulnerability.
gitlab/npm/json-ptr/GMS-2021-183
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in json-ptr.