{"action":"Upgrade tree-kit to 0.7.5 or later.","affected":[{"fixed":"0.7.5","introduced":"0"}],"component":"tree-kit","cve_ids":["CVE-2023-38894"],"ecosystem":"npm","epss":0.01689,"exploited":false,"fixed_versions":["0.7.5"],"ghsa_id":"GHSA-5p42-m6f3-hpmj","id":"tcs_01M5KF48TDF3FC95YET0PNYZJT","modified_at":"2023-11-08T04:13:10.715525Z","published_at":"2023-08-17T00:30:26Z","references":["https://osv.dev/vulnerability/GHSA-5p42-m6f3-hpmj","https://nvd.nist.gov/vuln/detail/CVE-2023-38894","https://github.com/cronvel/tree-kit/commit/61bf10cf0dbddaeea3f198cfe7cb469f360d82bc","https://github.com/cronvel/tree-kit","https://www.code-intelligence.com/blog/treekit-prototype-pollution-cve-2023-38894","http://tree-kit.com"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-5p42-m6f3-hpmj","url":"https://osv.dev/vulnerability/GHSA-5p42-m6f3-hpmj"}],"summary":"tree-kit Prototype Pollution vulnerability"}