{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.0.2"}],"component":"grunt-util-property","cve_ids":["CVE-2020-7641"],"ecosystem":"npm","epss":0.00379,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-4hq8-jgr8-mw9j","id":"tcs_01M5KF0KWG9ERNK0A328HH6W6V","modified_at":"2023-11-08T04:04:02.204191Z","published_at":"2022-07-18T00:00:33Z","references":["https://osv.dev/vulnerability/GHSA-4hq8-jgr8-mw9j","https://nvd.nist.gov/vuln/detail/CVE-2020-7641","https://github.com/mikaelkaron/grunt-util-property","https://github.com/mikaelkaron/grunt-util-property/blob/master/main.js%23L41","https://security.snyk.io/vuln/SNYK-JS-GRUNTUTILPROPERTY-565088"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"GHSA-4hq8-jgr8-mw9j","url":"https://osv.dev/vulnerability/GHSA-4hq8-jgr8-mw9j"}],"summary":"grunt-util-property 0.0.2 function call can add/modify properties of Object.prototype using a __proto__ payload"}