{"action":"Upgrade @zag-js/core to 0.82.2 or later.","affected":[{"fixed":"0.82.2","introduced":"0"}],"component":"@zag-js/core","cve_ids":["CVE-2024-57079"],"ecosystem":"npm","epss":0.00438,"exploited":false,"fixed_versions":["0.82.2"],"ghsa_id":"GHSA-fg4m-w35q-vfg2","id":"tcs_01M5KFNEAHMHF9VJMP4THBPKY2","modified_at":"2025-03-19T15:40:29Z","published_at":"2025-02-06T06:31:26Z","references":["https://osv.dev/vulnerability/GHSA-fg4m-w35q-vfg2","https://nvd.nist.gov/vuln/detail/CVE-2024-57079","https://github.com/chakra-ui/zag/pull/2255","https://github.com/chakra-ui/zag/commit/f53edc548f737aadfdd486a0043bdd5f5c068bbf","https://gist.github.com/tariqhawis/4778fc57084766b7b7fb6d25d20b7b9b","https://github.com/chakra-ui/zag"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-fg4m-w35q-vfg2","url":"https://osv.dev/vulnerability/GHSA-fg4m-w35q-vfg2"}],"summary":"@zag-js/core prototype pollution"}