{"action":"Upgrade y18n to 3.2.2 or later.","affected":[{"fixed":"3.2.2","introduced":"0"},{"fixed":"4.0.1","introduced":"4.0.0"},{"fixed":"5.0.5","introduced":"5.0.0"}],"component":"y18n","cve_ids":["CVE-2020-7774"],"ecosystem":"npm","epss":0.69589,"exploited":false,"fixed_versions":["3.2.2","4.0.1","5.0.5"],"ghsa_id":"GHSA-c4w7-xm78-47vh","id":"tcs_01M5KFHS8AW7Y0THB13979T5M6","modified_at":"2024-12-05T15:28:53.812442Z","published_at":"2021-03-29T16:05:12Z","references":["https://osv.dev/vulnerability/GHSA-c4w7-xm78-47vh","https://nvd.nist.gov/vuln/detail/CVE-2020-7774","https://github.com/yargs/y18n/issues/96","https://github.com/yargs/y18n/pull/108","https://github.com/yargs/y18n/commit/90401eea9062ad498f4f792e3fff8008c4c193a3","https://github.com/yargs/y18n/commit/a9ac604abf756dec9687be3843e2c93bfe581f25","https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","https://github.com/yargs/y18n","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1038306","https://snyk.io/vuln/SNYK-JS-Y18N-1021887","https://www.oracle.com/security-alerts/cpuApr2021.html"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-c4w7-xm78-47vh","url":"https://osv.dev/vulnerability/GHSA-c4w7-xm78-47vh"}],"summary":"Prototype Pollution in y18n"}