{"action":"Upgrade @viking04/merge to 1.0.2 or later.","affected":[{"fixed":"1.0.2","introduced":"0"}],"component":"@viking04/merge","cve_ids":["CVE-2021-3645"],"ecosystem":"npm","epss":0.01429,"exploited":false,"fixed_versions":["1.0.2"],"ghsa_id":"GHSA-cqqh-49mx-fq63","id":"tcs_01M5KFKCYS173VYK07E601J8C1","modified_at":"2023-11-08T04:06:14.516715Z","published_at":"2021-09-13T20:16:54Z","references":["https://osv.dev/vulnerability/GHSA-cqqh-49mx-fq63","https://nvd.nist.gov/vuln/detail/CVE-2021-3645","https://github.com/viking04/merge/commit/baba40332080b38b33840d2614df6d4142dedaf6","https://github.com/viking04/merge","https://huntr.dev/bounties/ef387a9e-ca3c-4c21-80e3-d34a6a896262"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-cqqh-49mx-fq63","url":"https://osv.dev/vulnerability/GHSA-cqqh-49mx-fq63"}],"summary":"merge vulnerable to Prototype Pollution"}