{"action":"Upgrade uplot to 1.6.31 or later.","affected":[{"fixed":"1.6.31","introduced":"0"}],"component":"uplot","cve_ids":["CVE-2024-21489"],"ecosystem":"npm","epss":0.0071,"exploited":false,"fixed_versions":["1.6.31"],"ghsa_id":"GHSA-34q8-jcq6-mc37","id":"tcs_01M5KEVXB09RQC83M3C7HS93WJ","modified_at":"2024-10-01T18:42:10.683979Z","published_at":"2024-10-01T06:30:47Z","references":["https://osv.dev/vulnerability/GHSA-34q8-jcq6-mc37","https://nvd.nist.gov/vuln/detail/CVE-2024-21489","https://github.com/leeoniya/uPlot/commit/5756e3e9b91270b303157e14bd0174311047d983","https://github.com/leeoniya/uPlot","https://github.com/leeoniya/uPlot/blob/c52e5001c1d959a99ac495a53e4deca5c44464d2/src/utils.js#L437-L452","https://security.snyk.io/vuln/SNYK-JS-UPLOT-6209224"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GHSA-34q8-jcq6-mc37","url":"https://osv.dev/vulnerability/GHSA-34q8-jcq6-mc37"}],"summary":"uPlot Prototype Pollution vulnerability"}