{"action":"Upgrade class-transformer to 0.3.1 or later.","affected":[{"fixed":"0.3.1","introduced":"0"}],"component":"class-transformer","cve_ids":["CVE-2020-7637"],"ecosystem":"npm","epss":0.01188,"exploited":false,"fixed_versions":["0.3.1"],"ghsa_id":"GHSA-6gp3-h3jj-prx4","id":"tcs_01M5KF70HA3N7PKP50TTNP14PQ","modified_at":"2026-07-08T06:49:53.325567657Z","published_at":"2020-04-07T15:47:40Z","references":["https://osv.dev/vulnerability/GHSA-6gp3-h3jj-prx4","https://nvd.nist.gov/vuln/detail/CVE-2020-7637","https://github.com/typestack/class-transformer/commit/8f04eb9db02de708f1a20f6f2d2bb309b2fed01e","https://github.com/typestack/class-transformer","https://github.com/typestack/class-transformer/blob/a650d9f490573443f62508bc063b857bcd5e2525/src/ClassTransformer.ts#L29-L31,","https://snyk.io/vuln/SNYK-JS-CLASSTRANSFORMER-564431"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-6gp3-h3jj-prx4","url":"https://osv.dev/vulnerability/GHSA-6gp3-h3jj-prx4"}],"summary":"Prototype pollution in class-transformer"}