{"action":"Upgrade dset to 3.1.4 or later.","affected":[{"fixed":"3.1.4","introduced":"0"}],"component":"dset","cve_ids":["CVE-2024-21529"],"ecosystem":"npm","epss":0.00751,"exploited":false,"fixed_versions":["3.1.4"],"ghsa_id":"GHSA-f6v4-cf5j-vf3w","id":"tcs_01M5KFMQ835V17B22FJVFW9VSQ","modified_at":"2024-09-11T23:27:32.701649Z","published_at":"2024-09-11T06:30:39Z","references":["https://osv.dev/vulnerability/GHSA-f6v4-cf5j-vf3w","https://nvd.nist.gov/vuln/detail/CVE-2024-21529","https://github.com/lukeed/dset/commit/16d6154e085bef01e99f01330e5a421a7f098afa","https://github.com/lukeed/dset","https://security.snyk.io/vuln/SNYK-JS-DSET-7116691"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GHSA-f6v4-cf5j-vf3w","url":"https://osv.dev/vulnerability/GHSA-f6v4-cf5j-vf3w"}],"summary":"dset Prototype Pollution vulnerability"}