{"action":"Upgrade @75lb/deep-merge to 1.1.2 or later.","affected":[{"fixed":"1.1.2","introduced":"0"}],"component":"@75lb/deep-merge","cve_ids":["CVE-2024-38986"],"ecosystem":"npm","epss":0.00985,"exploited":false,"fixed_versions":["1.1.2"],"ghsa_id":"GHSA-28mc-g557-92m7","id":"tcs_01M5KESGRSZPWGH5S572GJPZJ1","modified_at":"2024-08-06T23:14:46Z","published_at":"2024-07-30T21:31:28Z","references":["https://osv.dev/vulnerability/GHSA-28mc-g557-92m7","https://nvd.nist.gov/vuln/detail/CVE-2024-38986","https://github.com/75lb/deep-merge/issues/1","https://github.com/75lb/deep-merge/commit/a68541fac3c2372f1ca67effad825990ad8046e1","https://gist.github.com/mestrtee/b20c3aee8bea16e1863933778da6e4cb","https://github.com/75lb/deep-merge"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-28mc-g557-92m7","url":"https://osv.dev/vulnerability/GHSA-28mc-g557-92m7"}],"summary":"@75lb/deep-merge Prototype Pollution vulnerability"}