{"action":"Upgrade bmoor to 0.10.1 or later.","affected":[{"fixed":"0.10.1","introduced":"0"}],"component":"bmoor","cve_ids":["CVE-2021-23558"],"ecosystem":"npm","epss":0.01627,"exploited":false,"fixed_versions":["0.10.1"],"ghsa_id":"GHSA-4m8h-h59m-m34j","id":"tcs_01M5KF0XJBV251YEKXFV0KTPWD","modified_at":"2026-09-10T03:49:11.599202948Z","published_at":"2022-02-01T00:50:09Z","references":["https://osv.dev/vulnerability/GHSA-4m8h-h59m-m34j","https://nvd.nist.gov/vuln/detail/CVE-2021-23558","https://github.com/b-heilman/bmoor/commit/29b0162cc1dc1791fc060891f568b0ae29bc542b","https://github.com/b-heilman/bmoor","https://security.snyk.io/vuln/SNYK-JS-BMOOR-598664","https://snyk.io/blog/remediate-javascript-type-confusion-bypassed-input-validation","https://snyk.io/vuln/SNYK-JS-BMOOR-2342622"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-4m8h-h59m-m34j","url":"https://osv.dev/vulnerability/GHSA-4m8h-h59m-m34j"}],"summary":"Prototype Pollution in bmoor"}