{"action":"Upgrade elysia to 1.4.27 or later.","affected":[{"fixed":"1.4.27","introduced":"0"}],"component":"elysia","cve_ids":["CVE-2026-31865"],"ecosystem":"npm","epss":0.00345,"exploited":false,"fixed_versions":["1.4.27"],"ghsa_id":"GHSA-8hq9-phh3-p2wp","id":"tcs_01M5KFD4FNHQM870NTBHT6QTY1","modified_at":"2026-03-19T19:17:47.117772Z","published_at":"2026-03-17T16:17:41Z","references":["https://osv.dev/vulnerability/GHSA-8hq9-phh3-p2wp","https://github.com/elysiajs/elysia/security/advisories/GHSA-8hq9-phh3-p2wp","https://nvd.nist.gov/vuln/detail/CVE-2026-31865","https://github.com/elysiajs/elysia/commit/e9d6b1743fa7368ef942dce181f6a089757f6aab","https://github.com/elysiajs/elysia"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-8hq9-phh3-p2wp","url":"https://osv.dev/vulnerability/GHSA-8hq9-phh3-p2wp"}],"summary":"Elysia Cookie Value Prototype Pollution"}