{"action":"Upgrade pathval to 1.1.1 or later.","affected":[{"fixed":"1.1.1","introduced":"0"}],"component":"pathval","cve_ids":["CVE-2020-7751"],"ecosystem":"npm","epss":0.01516,"exploited":false,"fixed_versions":["1.1.1"],"ghsa_id":"GHSA-g6ww-v8xp-vmwg","id":"tcs_01M5KFQDB2E34WBRR9DQ2K64PJ","modified_at":"2026-07-08T06:50:05.260651791Z","published_at":"2022-02-10T20:21:24Z","references":["https://osv.dev/vulnerability/GHSA-g6ww-v8xp-vmwg","https://nvd.nist.gov/vuln/detail/CVE-2020-7751","https://github.com/chaijs/pathval/pull/58/commits/21a9046cfa0c2697cb41990f3b4316db410e6c8a","https://github.com/chaijs/pathval/pull/58/files","https://github.com/chaijs/pathval","https://github.com/chaijs/pathval/releases/tag/v1.1.1","https://snyk.io/vuln/SNYK-JS-PATHVAL-596926"],"severity":{"label":"high","score":7.2},"sources":[{"source":"osv","source_id":"GHSA-g6ww-v8xp-vmwg","url":"https://osv.dev/vulnerability/GHSA-g6ww-v8xp-vmwg"}],"summary":"Prototype pollution in pathval"}