{"action":"Upgrade collection.js to 6.8.1 or later.","affected":[{"fixed":"6.8.1","introduced":"0"}],"component":"collection.js","cve_ids":["CVE-2023-26113"],"ecosystem":"npm","epss":0.0122,"exploited":false,"fixed_versions":["6.8.1"],"ghsa_id":"GHSA-47pj-q2vm-46xc","id":"tcs_01M5KEZPBGSYE7XXDQFWX4QK6V","modified_at":"2023-11-08T04:11:58.319386Z","published_at":"2023-03-18T06:30:15Z","references":["https://osv.dev/vulnerability/GHSA-47pj-q2vm-46xc","https://nvd.nist.gov/vuln/detail/CVE-2023-26113","https://github.com/kobezzza/Collection/issues/27","https://github.com/kobezzza/Collection/commit/d3d937645f62f37d3115d6aa90bb510fd856e6a2","https://github.com/kobezzza/Collection","https://github.com/kobezzza/Collection/blob/be32c48e68f49d3be48a58e929d1ab8ff1d2d19c/dist/node/iterators/extend.js%23L324","https://github.com/kobezzza/Collection/releases/tag/v6.8.1","https://security.snyk.io/vuln/SNYK-JS-COLLECTIONJS-3185148"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-47pj-q2vm-46xc","url":"https://osv.dev/vulnerability/GHSA-47pj-q2vm-46xc"}],"summary":"Collection.js vulnerable to Prototype Pollution"}