{"action":"Upgrade sds to 4.0.0 or later.","affected":[{"fixed":"4.0.0","introduced":"0"}],"component":"sds","cve_ids":["CVE-2020-7618"],"ecosystem":"npm","epss":0.01143,"exploited":false,"fixed_versions":["4.0.0"],"ghsa_id":"GHSA-cxm3-284p-qc4v","id":"tcs_01M5KFKXXQPGB98X5SQF0D4JKM","modified_at":"2026-03-13T21:57:05.977688Z","published_at":"2020-09-03T15:53:12Z","references":["https://osv.dev/vulnerability/GHSA-cxm3-284p-qc4v","https://nvd.nist.gov/vuln/detail/CVE-2020-7618","https://github.com/monsterkodi/sds/blob/master/js/set.js#L31","https://snyk.io/vuln/SNYK-JS-SDS-564123","https://www.npmjs.com/advisories/1506"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-cxm3-284p-qc4v","url":"https://osv.dev/vulnerability/GHSA-cxm3-284p-qc4v"}],"summary":"Prototype Pollution in sds"}