{"action":"Upgrade jointjs to 3.4.2 or later.","affected":[{"fixed":"3.4.2","introduced":"0"}],"component":"jointjs","cve_ids":["CVE-2021-23444"],"ecosystem":"npm","epss":0.0186,"exploited":false,"fixed_versions":["3.4.2"],"ghsa_id":"GHSA-f3pp-32qc-36w4","id":"tcs_01M5KFMBYPGR2WD4970372TE76","modified_at":"2025-01-14T09:12:13.266436Z","published_at":"2021-09-22T20:36:34Z","references":["https://osv.dev/vulnerability/GHSA-f3pp-32qc-36w4","https://github.com/clientIO/joint/pull/1514","https://github.com/clientIO/joint/commit/e5bf89efef6d5ea572d66870ffd86560de7830a8","https://github.com/clientIO/joint","https://github.com/clientIO/joint/releases/tag/v3.4.2","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1655817","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1655816","https://snyk.io/vuln/SNYK-JS-JOINTJS-1579578"],"severity":{"label":"medium","score":5.6},"sources":[{"source":"osv","source_id":"GHSA-f3pp-32qc-36w4","url":"https://osv.dev/vulnerability/GHSA-f3pp-32qc-36w4"}],"summary":"Prototype Pollution in jointjs"}