{"action":"Upgrade @thi.ng/paths to 5.1.63 or later.","affected":[{"fixed":"5.1.63","introduced":"0"}],"component":"@thi.ng/paths","cve_ids":["CVE-2024-29650"],"ecosystem":"npm","epss":0.01404,"exploited":false,"fixed_versions":["5.1.63"],"ghsa_id":"GHSA-8ppr-www8-hfjx","id":"tcs_01M5KFDNYSKHG43M54WECYGEQ4","modified_at":"2024-08-02T15:59:13Z","published_at":"2024-03-25T15:30:41Z","references":["https://osv.dev/vulnerability/GHSA-8ppr-www8-hfjx","https://nvd.nist.gov/vuln/detail/CVE-2024-29650","https://github.com/thi-ng/umbrella/issues/445","https://github.com/thi-ng/umbrella/commit/c78b484882ad5214a46ef83ddb8020571c171353","https://gist.github.com/tariqhawis/1bc340ca5ea6ae115c9ab9665cfd5921","https://github.com/thi-ng/umbrella","https://learn.snyk.io/lesson/prototype-pollution/#a0a863a5-fd3a-539f-e1ed-a0769f6c6e3b"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-8ppr-www8-hfjx","url":"https://osv.dev/vulnerability/GHSA-8ppr-www8-hfjx"}],"summary":"@thi.ng/paths Prototype Pollution vulnerability"}