{"action":"Upgrade set-value to 2.0.1 (2.x), 3.0.3 (3.x) or 4.0.1 (4.x) or later.","affected":[{"fixed":"4.0.1","introduced":"4.0.0"},{"fixed":"2.0.1","introduced":"0"},{"fixed":"3.0.3","introduced":"3.0.0"}],"component":"set-value","cve_ids":["CVE-2021-23440"],"ecosystem":"npm","epss":0.02206,"exploited":false,"fixed_versions":["4.0.1","2.0.1","3.0.3"],"ghsa_id":"GHSA-4jqc-8m5r-9rpr","id":"tcs_01M5KF0TA8W7JD5GA6ZS0DPJ8V","modified_at":"2025-01-14T09:11:57.266420Z","published_at":"2021-09-13T20:09:36Z","references":["https://osv.dev/vulnerability/GHSA-4jqc-8m5r-9rpr","https://nvd.nist.gov/vuln/detail/CVE-2021-23440","https://github.com/jonschlinkert/set-value/pull/33","https://github.com/jonschlinkert/set-value/pull/33/commits/383b72d47c74a55ae8b6e231da548f9280a4296a","https://github.com/jonschlinkert/set-value/commit/09c4b108fea3c0260008590053ff13da64913245","https://github.com/jonschlinkert/set-value/commit/7cf8073bb06bf0c15e08475f9f952823b4576452","https://github.com/jonschlinkert/set-value/commit/cb12f14955dde6e61829d70d1851bfea6a3c31ad","https://github.com/jonschlinkert/set-value","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1584212","https://snyk.io/vuln/SNYK-JS-SETVALUE-1540541","https://www.huntr.dev/bounties/2eae1159-01de-4f82-a177-7478a408c4a2","https://www.oracle.com/security-alerts/cpujan2022.html"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-4jqc-8m5r-9rpr","url":"https://osv.dev/vulnerability/GHSA-4jqc-8m5r-9rpr"}],"summary":"Prototype Pollution in set-value"}