{"action":"Upgrade property-expr to 2.0.3 or later.","affected":[{"fixed":"2.0.3","introduced":"0"}],"component":"property-expr","cve_ids":["CVE-2020-7707"],"ecosystem":"npm","epss":0.03376,"exploited":false,"fixed_versions":["2.0.3"],"ghsa_id":"GHSA-6fw4-hr69-g3rv","id":"tcs_01M5KF6VHH4V509KC0EKTKYCSJ","modified_at":"2025-01-14T08:57:32.795244Z","published_at":"2021-05-06T17:29:47Z","references":["https://osv.dev/vulnerability/GHSA-6fw4-hr69-g3rv","https://nvd.nist.gov/vuln/detail/CVE-2020-7707","https://github.com/jquense/expr/commit/df846910915d59f711ce63c1f817815bceab5ff7","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-598857","https://snyk.io/vuln/SNYK-JS-PROPERTYEXPR-598800"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-6fw4-hr69-g3rv","url":"https://osv.dev/vulnerability/GHSA-6fw4-hr69-g3rv"}],"summary":"Prototype Pollution in property-expr"}