{"action":"Upgrade web3-utils to 4.2.1 or later.","affected":[{"fixed":"4.2.1","introduced":"4.0.1"}],"component":"web3-utils","cve_ids":["CVE-2024-21505"],"ecosystem":"npm","epss":0.00712,"exploited":false,"fixed_versions":["4.2.1"],"ghsa_id":"GHSA-2g4c-8fpm-c46v","id":"tcs_01M5KESZRRA5C4VNG03W9AXB9A","modified_at":"2024-03-27T22:11:44.773394Z","published_at":"2024-03-27T21:57:42Z","references":["https://osv.dev/vulnerability/GHSA-2g4c-8fpm-c46v","https://github.com/web3/web3.js/security/advisories/GHSA-2g4c-8fpm-c46v","https://nvd.nist.gov/vuln/detail/CVE-2024-21505","https://github.com/web3/web3.js/commit/8ed041c6635d807b3da8960ad49e125e3d1b0e80","https://github.com/web3/web3.js","https://security.snyk.io/vuln/SNYK-JS-WEB3UTILS-6229337"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-2g4c-8fpm-c46v","url":"https://osv.dev/vulnerability/GHSA-2g4c-8fpm-c46v"}],"summary":"web3-utils Prototype Pollution vulnerability"}