{"action":"Upgrade dotty to 0.1.2 or later.","affected":[{"fixed":"0.1.2","introduced":"0"}],"component":"dotty","cve_ids":["CVE-2021-23624"],"ecosystem":"npm","epss":0.01283,"exploited":false,"fixed_versions":["0.1.2"],"ghsa_id":"GHSA-6g47-63mv-qpgh","id":"tcs_01M5KF6YFRNPJWEJ1MYEXCD443","modified_at":"2026-07-08T06:50:01.172373138Z","published_at":"2021-11-08T17:55:48Z","references":["https://osv.dev/vulnerability/GHSA-6g47-63mv-qpgh","https://nvd.nist.gov/vuln/detail/CVE-2021-23624","https://github.com/deoxxa/dotty/commit/88f61860dcc274a07a263c32cbe9d44c24ef02d7","https://github.com/deoxxa/dotty","https://snyk.io/vuln/SNYK-JS-DOTTY-1577292"],"severity":{"label":"medium","score":5.6},"sources":[{"source":"osv","source_id":"GHSA-6g47-63mv-qpgh","url":"https://osv.dev/vulnerability/GHSA-6g47-63mv-qpgh"}],"summary":"Prototype Pollution in dotty"}