{"action":"Upgrade defaults-deep to 0.2.4 or later.","affected":[{"fixed":"0.2.4","introduced":"0"}],"component":"defaults-deep","cve_ids":["CVE-2018-3723"],"ecosystem":"npm","epss":0.02004,"exploited":false,"fixed_versions":["0.2.4"],"ghsa_id":"GHSA-cqp5-m4pq-gfgp","id":"tcs_01M5KFKCRA3WJH2S0HV44ZXMF8","modified_at":"2023-11-08T04:00:17.304929Z","published_at":"2018-07-26T15:18:43Z","references":["https://osv.dev/vulnerability/GHSA-cqp5-m4pq-gfgp","https://nvd.nist.gov/vuln/detail/CVE-2018-3723","https://github.com/jonschlinkert/defaults-deep/commit/c873f341327ad885ff4d0f23b3d3bca31b0343e5","https://hackerone.com/reports/310514","https://github.com/advisories/GHSA-cqp5-m4pq-gfgp","https://www.npmjs.com/advisories/581"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-cqp5-m4pq-gfgp","url":"https://osv.dev/vulnerability/GHSA-cqp5-m4pq-gfgp"}],"summary":"Prototype Pollution in defaults-deep"}