{"action":"Upgrade sequelize-typescript to 2.1.6 or later.","affected":[{"fixed":"2.1.6","introduced":"0"}],"component":"sequelize-typescript","cve_ids":["CVE-2023-6293"],"ecosystem":"npm","epss":0.00589,"exploited":false,"fixed_versions":["2.1.6"],"ghsa_id":"GHSA-7pvx-4585-hqww","id":"tcs_01M5KFAK7JB6TKZ7YBZBDRYJW5","modified_at":"2023-12-01T22:58:36.263839Z","published_at":"2023-11-24T21:30:28Z","references":["https://osv.dev/vulnerability/GHSA-7pvx-4585-hqww","https://nvd.nist.gov/vuln/detail/CVE-2023-6293","https://github.com/robinbuschmann/sequelize-typescript/commit/5ce8afdd1671b08c774ce106b000605ba8fccf78","https://github.com/robinbuschmann/sequelize-typescript","https://huntr.com/bounties/36a7ecbf-4d3d-462e-86a3-cda7b1ec64e2"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-7pvx-4585-hqww","url":"https://osv.dev/vulnerability/GHSA-7pvx-4585-hqww"}],"summary":"sequelize-typescript Prototype Pollution vulnerability"}