{"action":"Upgrade set-or-get to 1.2.11 or later.","affected":[{"fixed":"1.2.11","introduced":"1.0.0"}],"component":"set-or-get","cve_ids":["CVE-2021-25913"],"ecosystem":"npm","epss":0.04197,"exploited":false,"fixed_versions":["1.2.11"],"ghsa_id":"GHSA-6rv4-4qv6-88g2","id":"tcs_01M5KF7XPD051HNJR7XPKZPVVW","modified_at":"2023-11-08T04:05:17.100315Z","published_at":"2021-04-12T17:39:19Z","references":["https://osv.dev/vulnerability/GHSA-6rv4-4qv6-88g2","https://nvd.nist.gov/vuln/detail/CVE-2021-25913","https://github.com/IonicaBizau/set-or-get.js/commit/82ede5cccb2e8d13e4f62599203a4389f6d8e936","https://www.npmjs.com/package/set-or-get","https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25913"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-6rv4-4qv6-88g2","url":"https://osv.dev/vulnerability/GHSA-6rv4-4qv6-88g2"}],"summary":"Prototype Pollution in set-or-get"}