{"action":"Upgrade deep-object-diff to 1.1.9 or later.","affected":[{"fixed":"1.1.9","introduced":"1.1.6"}],"component":"deep-object-diff","cve_ids":["CVE-2022-41713"],"ecosystem":"npm","epss":0.00713,"exploited":false,"fixed_versions":["1.1.9"],"ghsa_id":"GHSA-653v-rqx9-j85p","id":"tcs_01M5KF5P6NAZ4VRZSSDQTP1K5K","modified_at":"2023-11-08T04:10:31.925498Z","published_at":"2022-11-04T12:00:25Z","references":["https://osv.dev/vulnerability/GHSA-653v-rqx9-j85p","https://nvd.nist.gov/vuln/detail/CVE-2022-41713","https://github.com/mattphillips/deep-object-diff/issues/85","https://github.com/mattphillips/deep-object-diff/issues/85#issuecomment-1312450353","https://github.com/mattphillips/deep-object-diff/pull/87/commits/55f9c3c70cf0d54cb30291e949fb8682fa3c5d9f","https://github.com/mattphillips/deep-object-diff/pull/87/commits/9576963b68b955e88610aa4f0c696a1aafc1119d","https://fluidattacks.com/advisories/heldens","https://github.com/mattphillips/deep-object-diff"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-653v-rqx9-j85p","url":"https://osv.dev/vulnerability/GHSA-653v-rqx9-j85p"}],"summary":"deep-object-diff vulnerable to Prototype Pollution"}