{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"3.0.2"}],"component":"openmct","cve_ids":["CVE-2023-45282"],"ecosystem":"npm","epss":0.0116,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-4xcx-cwrq-w792","id":"tcs_01M5KF1ZTM0ZCMZJ3CZCXAKXNJ","modified_at":"2023-11-08T04:13:37.938891Z","published_at":"2023-10-06T21:30:49Z","references":["https://osv.dev/vulnerability/GHSA-4xcx-cwrq-w792","https://nvd.nist.gov/vuln/detail/CVE-2023-45282","https://github.com/nasa/openmct/pull/7094/commits/545a1770c523ecc3410dca884c6809d5ff0f9d52","https://github.com/nasa/openmct/commit/2243381d527c0d84cc48e9ace78be7cda5363612","https://github.com/nasa/openmct","https://github.com/nasa/openmct/compare/v3.0.2...v3.1.0","https://nasa.github.io/openmct","https://www.linkedin.com/pulse/prototype-pollution-nasas-open-mct-cve-2023-45282"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-4xcx-cwrq-w792","url":"https://osv.dev/vulnerability/GHSA-4xcx-cwrq-w792"}],"summary":"Prototype Pollution in NASA Open MCT"}