{"action":"Upgrade progressbar.js to 1.1.1 or later.","affected":[{"fixed":"1.1.1","introduced":"0"}],"component":"progressbar.js","cve_ids":["CVE-2023-26133"],"ecosystem":"npm","epss":0.01261,"exploited":false,"fixed_versions":["1.1.1"],"ghsa_id":"GHSA-89qm-hm2x-mxm3","id":"tcs_01M5KFCG0YK53AG2SSB6EZF37E","modified_at":"2023-11-08T04:11:59.374308Z","published_at":"2023-06-12T06:30:17Z","references":["https://osv.dev/vulnerability/GHSA-89qm-hm2x-mxm3","https://nvd.nist.gov/vuln/detail/CVE-2023-26133","https://github.com/kimmobrunfeldt/progressbar.js/commit/97fe68ef4beccfe84b7cba08ea1fc695e38cc04b","https://github.com/kimmobrunfeldt/progressbar.js","https://github.com/kimmobrunfeldt/progressbar.js/blob/74536b9eeeaaf51144706d918ed5a0a679631d96/src/utils.js#L18","https://github.com/kimmobrunfeldt/progressbar.js/blob/74536b9eeeaaf51144706d918ed5a0a679631d96/src/utils.js#L20","https://security.snyk.io/vuln/SNYK-JS-PROGRESSBARJS-3184152"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GHSA-89qm-hm2x-mxm3","url":"https://osv.dev/vulnerability/GHSA-89qm-hm2x-mxm3"}],"summary":"progressbar.js vulnerable to Prototype Pollution"}