{"action":"Upgrade dustjs-linkedin to 3.0.0 or later.","affected":[{"fixed":"3.0.0","introduced":"0"}],"component":"dustjs-linkedin","cve_ids":["CVE-2021-4264"],"ecosystem":"npm","epss":0.01153,"exploited":false,"fixed_versions":["3.0.0"],"ghsa_id":"GHSA-c6rp-wrp9-qr4q","id":"tcs_01M5KFHZ2RCA6E9D8ZYCM7RNX3","modified_at":"2023-11-08T04:07:07.132931Z","published_at":"2022-12-21T21:30:15Z","references":["https://osv.dev/vulnerability/GHSA-c6rp-wrp9-qr4q","https://nvd.nist.gov/vuln/detail/CVE-2021-4264","https://github.com/linkedin/dustjs/issues/804","https://github.com/linkedin/dustjs/pull/805","https://github.com/linkedin/dustjs/commit/ddb6523832465d38c9d80189e9de60519ac307c3","https://github.com/linkedin/dustjs","https://github.com/linkedin/dustjs/releases/tag/v3.0.0","https://vuldb.com/?ctiid.216464","https://vuldb.com/?id.216464"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-c6rp-wrp9-qr4q","url":"https://osv.dev/vulnerability/GHSA-c6rp-wrp9-qr4q"}],"summary":"dustjs-linkedin vulnerable to Prototype Pollution"}