{"action":"Upgrade oro/platform to 4.1.14 or later.","affected":[{"fixed":"4.1.14","introduced":"4.1.0"},{"fixed":"4.2.8","introduced":"4.2.0"}],"component":"oro/platform","cve_ids":["CVE-2021-43852"],"ecosystem":"Packagist","epss":0.01094,"exploited":false,"fixed_versions":["4.1.14","4.2.8"],"ghsa_id":"GHSA-jx5q-g37m-h5hj","id":"tcs_01M5KF4ZS299F4JN6CMBWF2EQ1","modified_at":"2026-07-08T06:27:56.591704235Z","published_at":"2022-01-06T18:29:51Z","references":["https://osv.dev/vulnerability/GHSA-jx5q-g37m-h5hj","https://github.com/oroinc/platform/security/advisories/GHSA-jx5q-g37m-h5hj","https://nvd.nist.gov/vuln/detail/CVE-2021-43852","https://github.com/oroinc/platform/commit/62c26936b3adee9c20255dcd9f8ee5c299b464a9","https://github.com/oroinc/platform"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-jx5q-g37m-h5hj","url":"https://osv.dev/vulnerability/GHSA-jx5q-g37m-h5hj"}],"summary":"Client-Side JavaScript Prototype Pollution in oro/platform"}