{"action":"Upgrade scim-patch to 0.9.2 or later.","affected":[{"fixed":"0.9.2","introduced":"0"}],"component":"scim-patch","cve_ids":["CVE-2026-61834"],"ecosystem":"npm","epss":0.00396,"exploited":false,"fixed_versions":["0.9.2"],"ghsa_id":"GHSA-2mhw-wcx5-v3xj","id":"tcs_01M5KETK9X4NHC0FW0HFTXWBB7","modified_at":"2026-09-28T14:15:04.388935988Z","published_at":"2026-09-28T14:01:15Z","references":["https://osv.dev/vulnerability/GHSA-2mhw-wcx5-v3xj","https://github.com/thomaspoignant/scim-patch/security/advisories/GHSA-2mhw-wcx5-v3xj","https://nvd.nist.gov/vuln/detail/CVE-2026-61834","https://github.com/thomaspoignant/scim-patch/pull/1127","https://github.com/thomaspoignant/scim-patch/commit/c86474f7a9b16191d939f59ba94eca6c6e63044b","https://github.com/thomaspoignant/scim-patch","https://github.com/thomaspoignant/scim-patch/releases/tag/v0.9.2"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-2mhw-wcx5-v3xj","url":"https://osv.dev/vulnerability/GHSA-2mhw-wcx5-v3xj"}],"summary":"scim-patch: Mutation of Inherited Built-in Method Objects"}