{"action":"Upgrade whois to 2.13.6 or later.","affected":[{"fixed":"2.13.6","introduced":"0"}],"component":"whois","cve_ids":["CVE-2020-36618"],"ecosystem":"npm","epss":0.01006,"exploited":false,"fixed_versions":["2.13.6"],"ghsa_id":"GHSA-97jv-c342-5xhc","id":"tcs_01M5KFF3T9QMC1WR31GSD46CZM","modified_at":"2023-11-08T04:03:48.278506Z","published_at":"2022-12-19T15:30:29Z","references":["https://osv.dev/vulnerability/GHSA-97jv-c342-5xhc","https://nvd.nist.gov/vuln/detail/CVE-2020-36618","https://github.com/FurqanSoftware/node-whois/pull/105","https://github.com/FurqanSoftware/node-whois/commit/46ccc2aee8d063c7b6b4dee2c2834113b7286076","https://github.com/FurqanSoftware/node-whois","https://vuldb.com/?id.216252","https://web.archive.org/web/20220403104013/https://www.npmjs.com/package/whois"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-97jv-c342-5xhc","url":"https://osv.dev/vulnerability/GHSA-97jv-c342-5xhc"}],"summary":"FurqanSoftware/node-whois vulnerable to Prototype Pollution"}