{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.4.0"}],"component":"backbone-query-parameters","cve_ids":["CVE-2021-20085"],"ecosystem":"npm","epss":0.01606,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-8qpm-5c82-rf96","id":"tcs_01M5KFDSJZE22TZNPJEM59PY4X","modified_at":"2023-11-08T04:04:34.528311Z","published_at":"2021-05-06T15:52:02Z","references":["https://osv.dev/vulnerability/GHSA-8qpm-5c82-rf96","https://nvd.nist.gov/vuln/detail/CVE-2021-20085","https://github.com/BlackFan/client-side-prototype-pollution/blob/master/pp/backbone-qp.md"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-8qpm-5c82-rf96","url":"https://osv.dev/vulnerability/GHSA-8qpm-5c82-rf96"}],"summary":"Prototype Pollution in backbone-query-parameters"}