{"action":"Upgrade json8 to 1.0.3 or later.","affected":[{"fixed":"1.0.3","introduced":"0"}],"component":"json8","cve_ids":["CVE-2020-7770"],"ecosystem":"npm","epss":0.01893,"exploited":false,"fixed_versions":["1.0.3"],"ghsa_id":"GHSA-7h43-gx24-p529","id":"tcs_01M5KFA37V5W46TN8P6GHY18HF","modified_at":"2026-07-08T06:49:42.512196386Z","published_at":"2021-05-10T19:17:05Z","references":["https://osv.dev/vulnerability/GHSA-7h43-gx24-p529","https://nvd.nist.gov/vuln/detail/CVE-2020-7770","https://github.com/sonnyp/JSON8/commit/2e890261b66cbc54ae01d0c79c71b0fd18379e7e","https://snyk.io/vuln/SNYK-JS-JSON8-1017116","https://www.npmjs.com/package/json8"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-7h43-gx24-p529","url":"https://osv.dev/vulnerability/GHSA-7h43-gx24-p529"}],"summary":"Prototype pollution in json8"}