{"action":"Upgrade @tmlmobilidade/utils to 20260509.0340.15 or later.","affected":[{"fixed":"20260509.0340.15","introduced":"0"}],"component":"@tmlmobilidade/utils","cve_ids":["CVE-2026-45325"],"ecosystem":"npm","epss":0.00464,"exploited":false,"fixed_versions":["20260509.0340.15"],"ghsa_id":"GHSA-cmxg-94mg-jq94","id":"tcs_01M5KFK5VF98Z1MJZX49M7R5TV","modified_at":"2026-09-10T03:51:05.334255822Z","published_at":"2026-05-18T17:07:04Z","references":["https://osv.dev/vulnerability/GHSA-cmxg-94mg-jq94","https://github.com/tmlmobilidade/go/security/advisories/GHSA-cmxg-94mg-jq94","https://github.com/tmlmobilidade/go/commit/b10505baa7ba0701f830a05f3007c0a6bdd00eb7","https://github.com/tmlmobilidade/go","https://github.com/tmlmobilidade/go/blob/prd/packages/utils/src/generic/value-at-path.ts"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GHSA-cmxg-94mg-jq94","url":"https://osv.dev/vulnerability/GHSA-cmxg-94mg-jq94"}],"summary":"@tmlmobilidade/utils has prototype pollution in its setValueAtPath"}