{"action":"Upgrade object-path to 0.11.5 or later.","affected":[{"fixed":"0.11.5","introduced":"0"}],"component":"object-path","cve_ids":["CVE-2020-15256"],"ecosystem":"npm","epss":0.01546,"exploited":false,"fixed_versions":["0.11.5"],"ghsa_id":"GHSA-cwx2-736x-mf6w","id":"tcs_01M5KFKVY0ZNN19NY3NREJ3Y1X","modified_at":"2026-07-08T06:00:47.441827685Z","published_at":"2020-10-19T20:55:55Z","references":["https://osv.dev/vulnerability/GHSA-cwx2-736x-mf6w","https://github.com/mariocasciaro/object-path/security/advisories/GHSA-cwx2-736x-mf6w","https://nvd.nist.gov/vuln/detail/CVE-2020-15256","https://github.com/mariocasciaro/object-path/commit/2be3354c6c46215c7635eb1b76d80f1319403c68","https://github.com/mariocasciaro/object-path"],"severity":{"label":"high","score":7.7},"sources":[{"source":"osv","source_id":"GHSA-cwx2-736x-mf6w","url":"https://osv.dev/vulnerability/GHSA-cwx2-736x-mf6w"}],"summary":"Prototype pollution in object-path"}