{"action":"No fix published. Pin and monitor.","affected":[],"component":"deep.assign","cve_ids":["CVE-2021-40663"],"ecosystem":"npm","epss":0.01794,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-3829-mgmw-jcg4","id":"tcs_01M5KEWH4ZJ6C72SW6SDT4QWFS","modified_at":"2023-11-08T04:06:48.213988Z","published_at":"2022-07-01T00:01:14Z","references":["https://osv.dev/vulnerability/GHSA-3829-mgmw-jcg4","https://nvd.nist.gov/vuln/detail/CVE-2021-40663","https://github.com/janbialostok/deep-assign/issues/1","https://github.com/janbialostok/deep-assign","https://security.netapp.com/advisory/ntap-20220826-0002","https://www.npmjs.com/package/deep.assign"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-3829-mgmw-jcg4","url":"https://osv.dev/vulnerability/GHSA-3829-mgmw-jcg4"}],"summary":"Prototype Pollution in deep.assign"}