{"action":"Upgrade deep-get-set to 1.1.1 or later.","affected":[{"fixed":"1.1.1","introduced":"0"}],"component":"deep-get-set","cve_ids":["CVE-2020-7715"],"ecosystem":"npm","epss":0.01981,"exploited":false,"fixed_versions":["1.1.1"],"ghsa_id":"GHSA-85cp-p426-42f5","id":"tcs_01M5KFBVYV98Y0H6JKW88RE83G","modified_at":"2023-11-08T04:04:06.477796Z","published_at":"2021-05-06T18:12:59Z","references":["https://osv.dev/vulnerability/GHSA-85cp-p426-42f5","https://nvd.nist.gov/vuln/detail/CVE-2020-7715","https://github.com/acstll/deep-get-set/commit/a127e65bc77ff5707a6a103819e140d11475c5f4","https://snyk.io/vuln/SNYK-JS-DEEPGETSET-598666"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-85cp-p426-42f5","url":"https://osv.dev/vulnerability/GHSA-85cp-p426-42f5"}],"summary":"Prototype Pollution in deep-get-set"}