{"action":"Upgrade safe-flat to 2.0.2 or later.","affected":[{"fixed":"2.0.2","introduced":"2.0.0"}],"component":"safe-flat","cve_ids":["CVE-2021-25927"],"ecosystem":"npm","epss":0.03337,"exploited":false,"fixed_versions":["2.0.2"],"ghsa_id":"GHSA-33rv-m2gp-mm2r","id":"tcs_01M5KEVT6JHX7X95Q4M0NGV5ZQ","modified_at":"2023-11-08T04:05:17.468833Z","published_at":"2021-06-21T17:18:29Z","references":["https://osv.dev/vulnerability/GHSA-33rv-m2gp-mm2r","https://nvd.nist.gov/vuln/detail/CVE-2021-25927","https://github.com/jessie-codes/safe-flat/commit/4b9b7db976bba8c968354f4315f5f9c219b7cbf3","https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25927"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-33rv-m2gp-mm2r","url":"https://osv.dev/vulnerability/GHSA-33rv-m2gp-mm2r"}],"summary":"Prototype pollution in safe-flat"}