{"action":"Upgrade getobject to 1.0.0 or later.","affected":[{"fixed":"1.0.0","introduced":"0"}],"component":"getobject","cve_ids":["CVE-2020-28282"],"ecosystem":"npm","epss":0.0424,"exploited":false,"fixed_versions":["1.0.0"],"ghsa_id":"GHSA-957j-59c2-j692","id":"tcs_01M5KFETAGBCC7PQ5SAV89CYSX","modified_at":"2023-11-08T04:03:24.953595Z","published_at":"2021-10-12T16:26:37Z","references":["https://osv.dev/vulnerability/GHSA-957j-59c2-j692","https://nvd.nist.gov/vuln/detail/CVE-2020-28282","https://github.com/cowboy/node-getobject","https://github.com/cowboy/node-getobject/blob/aba04a8e1d6180eb39eff09990c3a43886ba8937/lib/getobject.js#L48","https://www.whitesourcesoftware.com/vulnerability-database/CVE-2020-28282"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-957j-59c2-j692","url":"https://osv.dev/vulnerability/GHSA-957j-59c2-j692"}],"summary":"Prototype pollution in getobject"}