{"action":"Upgrade dotty to 0.1.1 or later.","affected":[{"fixed":"0.1.1","introduced":"0"}],"component":"dotty","cve_ids":["CVE-2021-25912"],"ecosystem":"npm","epss":0.03481,"exploited":false,"fixed_versions":["0.1.1"],"ghsa_id":"GHSA-f5c9-x9j6-87qp","id":"tcs_01M5KFMHEMD1QQZB9BK3991QXV","modified_at":"2023-11-08T04:05:17.039703Z","published_at":"2021-02-05T20:43:08Z","references":["https://osv.dev/vulnerability/GHSA-f5c9-x9j6-87qp","https://nvd.nist.gov/vuln/detail/CVE-2021-25912","https://github.com/deoxxa/dotty/commit/cd997d37917186c131be71501a698803f2b7ebdb","https://www.npmjs.com/package/dotty","https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25912"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-f5c9-x9j6-87qp","url":"https://osv.dev/vulnerability/GHSA-f5c9-x9j6-87qp"}],"summary":"Prototype pollution in dotty"}