{"action":"Upgrade @blackprint/engine to 0.9.2 or later.","affected":[{"fixed":"0.9.2","introduced":"0.8.12"}],"component":"@blackprint/engine","cve_ids":["CVE-2024-24294"],"ecosystem":"npm","epss":0.00782,"exploited":false,"fixed_versions":["0.9.2"],"ghsa_id":"GHSA-g3q2-vcjq-rgrc","id":"tcs_01M5KFPXCTZ7G7FG17R2PSQV4E","modified_at":"2024-07-05T20:59:11Z","published_at":"2024-05-20T18:31:22Z","references":["https://osv.dev/vulnerability/GHSA-g3q2-vcjq-rgrc","https://nvd.nist.gov/vuln/detail/CVE-2024-24294","https://github.com/Blackprint/engine-js/commit/bd6b965b03c467e7a58ab0cb89b9172fa5e07013","https://gist.github.com/mestrtee/d1eb6e1f7c6dd60d8838c3e56cab634d","https://github.com/Blackprint/engine-js"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-g3q2-vcjq-rgrc","url":"https://osv.dev/vulnerability/GHSA-g3q2-vcjq-rgrc"}],"summary":"Blackprint @blackprint/engine Prototype Pollution issue"}