{"action":"Upgrade fast-json-patch to 3.1.1 or later.","affected":[{"fixed":"3.1.1","introduced":"0"}],"component":"fast-json-patch","cve_ids":["CVE-2021-4279"],"ecosystem":"npm","epss":0.01114,"exploited":false,"fixed_versions":["3.1.1"],"ghsa_id":"GHSA-8gh8-hqwg-xf34","id":"tcs_01M5KFCWWNADEKP9Z90TNR3WJZ","modified_at":"2024-03-01T14:21:21Z","published_at":"2022-12-25T21:30:22Z","references":["https://osv.dev/vulnerability/GHSA-8gh8-hqwg-xf34","https://nvd.nist.gov/vuln/detail/CVE-2021-4279","https://github.com/Starcounter-Jack/JSON-Patch/pull/262","https://github.com/Starcounter-Jack/JSON-Patch/commit/7ad6af41eabb2d799f698740a91284d762c955c9","https://blog.effectrenan.com/pwn2win-2021-illusion-web-challenge","https://github.com/Starcounter-Jack/JSON-Patch","https://github.com/Starcounter-Jack/JSON-Patch/releases/tag/3.1.1","https://vuldb.com/?ctiid.216778","https://vuldb.com/?id.216778","https://www.huntr.dev/bounties/1-npm-fast-json-patch"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-8gh8-hqwg-xf34","url":"https://osv.dev/vulnerability/GHSA-8gh8-hqwg-xf34"}],"summary":"Starcounter-Jack JSON-Patch Prototype Pollution vulnerability"}