{"action":"Upgrade ts-nodash to 1.2.7 or later.","affected":[{"fixed":"1.2.7","introduced":"0"}],"component":"ts-nodash","cve_ids":["CVE-2021-23403"],"ecosystem":"npm","epss":0.01287,"exploited":false,"fixed_versions":["1.2.7"],"ghsa_id":"GHSA-5xjx-4xcm-hpcm","id":"tcs_01M5KF51KT58FT8ZG1DS7KVH5Y","modified_at":"2026-03-13T22:11:25.799549Z","published_at":"2021-12-10T18:53:42Z","references":["https://osv.dev/vulnerability/GHSA-5xjx-4xcm-hpcm","https://nvd.nist.gov/vuln/detail/CVE-2021-23403","https://github.com/BadOPCode/NoDash/commit/b9cc2b3b49f6cd5228e406bc57e17a28b998fea5","https://github.com/BadOPCode/NoDash","https://github.com/BadOPCode/NoDash/blob/master/src/Merge.ts","https://snyk.io/vuln/SNYK-JS-TSNODASH-1311009"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-5xjx-4xcm-hpcm","url":"https://osv.dev/vulnerability/GHSA-5xjx-4xcm-hpcm"}],"summary":"Prototype Pollution in ts-nodash"}