{"action":"Upgrade immer to 8.0.1 or later.","affected":[{"fixed":"8.0.1","introduced":"7.0.0"}],"component":"immer","cve_ids":["CVE-2020-28477"],"ecosystem":"npm","epss":0.02341,"exploited":false,"fixed_versions":["8.0.1"],"ghsa_id":"GHSA-9qmh-276g-x5pj","id":"tcs_01M5KFGPV2SWX52ESS97JHQ4VA","modified_at":"2025-01-14T08:57:00.110130Z","published_at":"2021-01-20T21:27:56Z","references":["https://osv.dev/vulnerability/GHSA-9qmh-276g-x5pj","https://nvd.nist.gov/vuln/detail/CVE-2020-28477","https://github.com/immerjs/immer/issues/738","https://github.com/immerjs/immer/commit/da2bd4fa0edc9335543089fe7d290d6a346c40c5","https://github.com/immerjs/immer/blob/master/src/plugins/patches.ts%23L213","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1061986","https://snyk.io/vuln/SNYK-JS-IMMER-1019369","https://www.npmjs.com/package/immer"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-9qmh-276g-x5pj","url":"https://osv.dev/vulnerability/GHSA-9qmh-276g-x5pj"}],"summary":"Prototype Pollution in immer"}