{"action":"Upgrade @sap/hana-client to 2.21.31 or later.","affected":[{"fixed":"2.21.31","introduced":"2.0.0"}],"component":"@sap/hana-client","cve_ids":["CVE-2024-45277"],"ecosystem":"npm","epss":0.00585,"exploited":false,"fixed_versions":["2.21.31"],"ghsa_id":"GHSA-6339-gv7w-g5f4","id":"tcs_01M5KF593RG6QQDQB2XY3QWDP1","modified_at":"2024-10-08T15:12:10.986096Z","published_at":"2024-10-08T06:30:47Z","references":["https://osv.dev/vulnerability/GHSA-6339-gv7w-g5f4","https://nvd.nist.gov/vuln/detail/CVE-2024-45277","https://me.sap.com/notes/3520100","https://url.sap/sapsecuritypatchday","https://www.npmjs.com/package/@sap/hana-client?activeTab=code"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-6339-gv7w-g5f4","url":"https://osv.dev/vulnerability/GHSA-6339-gv7w-g5f4"}],"summary":"SAP HANA Node.js client package vulnerable to Prototype Pollution"}