{"action":"Upgrade immer to 9.0.6 or later.","affected":[{"fixed":"9.0.6","introduced":"7.0.0"}],"component":"immer","cve_ids":["CVE-2021-3757"],"ecosystem":"npm","epss":0.01664,"exploited":false,"fixed_versions":["9.0.6"],"ghsa_id":"GHSA-c36v-fmgq-m8hx","id":"tcs_01M5KFHJ4Z5AN525JAZKQED6S4","modified_at":"2024-04-25T22:09:12Z","published_at":"2021-09-07T22:57:14Z","references":["https://osv.dev/vulnerability/GHSA-c36v-fmgq-m8hx","https://nvd.nist.gov/vuln/detail/CVE-2021-3757","https://github.com/immerjs/immer/commit/fa671e55ee9bd42ae08cc239102b665a23958237","https://github.com/immerjs/immer","https://huntr.dev/bounties/23d38099-71cd-42ed-a77a-71e68094adfa"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-c36v-fmgq-m8hx","url":"https://osv.dev/vulnerability/GHSA-c36v-fmgq-m8hx"}],"summary":"Prototype Pollution in immer"}