{"action":"Upgrade changeset to 0.2.5 or later.","affected":[{"fixed":"0.2.5","introduced":"0.0.1"}],"component":"changeset","cve_ids":["CVE-2021-25915"],"ecosystem":"npm","epss":0.03507,"exploited":false,"fixed_versions":["0.2.5"],"ghsa_id":"GHSA-2gqw-q9r9-7f79","id":"tcs_01M5KET3Y59NP32DMR70NCP0E2","modified_at":"2023-11-08T04:05:17.224990Z","published_at":"2022-05-24T17:44:00Z","references":["https://osv.dev/vulnerability/GHSA-2gqw-q9r9-7f79","https://nvd.nist.gov/vuln/detail/CVE-2021-25915","https://github.com/eugeneware/changeset/commit/9e588844edbb9993b32e7366cc799262b4447f99","https://github.com/eugeneware/changeset","https://web.archive.org/web/20210323102946/https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25915"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-2gqw-q9r9-7f79","url":"https://osv.dev/vulnerability/GHSA-2gqw-q9r9-7f79"}],"summary":"Changeset vulnerable to prototype pollution"}