{"action":"Upgrade set-in to 2.0.5 or later.","affected":[{"fixed":"2.0.5","introduced":"2.0.1"}],"component":"set-in","cve_ids":["CVE-2026-26021"],"ecosystem":"npm","epss":0.00565,"exploited":false,"fixed_versions":["2.0.5"],"ghsa_id":"GHSA-2c4m-g7rx-63q7","id":"tcs_01M5KESQSB28NQ3GXNWPES8E4D","modified_at":"2026-02-22T23:20:49.933624Z","published_at":"2026-02-11T15:13:28Z","references":["https://osv.dev/vulnerability/GHSA-2c4m-g7rx-63q7","https://github.com/ahdinosaur/set-in/security/advisories/GHSA-2c4m-g7rx-63q7","https://nvd.nist.gov/vuln/detail/CVE-2026-26021","https://github.com/ahdinosaur/set-in/pull/6","https://github.com/ahdinosaur/set-in/commit/34842cc02de3fd65d6f8bd0b268347e7b390125b","https://github.com/ahdinosaur/set-in/commit/6bad255961d379e4b1f5fbc52ef9dc8420816f24","https://github.com/ahdinosaur/set-in/commit/b8e1dabfdbd35c8d604b6324e01d03f280256c3d","https://github.com/ahdinosaur/set-in/commit/d87c1a09fa2edb55cd76440a67d83d1cb828df11","https://github.com/ahdinosaur/set-in"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-2c4m-g7rx-63q7","url":"https://osv.dev/vulnerability/GHSA-2c4m-g7rx-63q7"},{"source":"nvd","source_id":"CVE-2026-26021","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-26021"}],"summary":"set-in Affected by Prototype Pollution"}