{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"3.0.0"}],"component":"node-gettext","cve_ids":["CVE-2024-21528"],"ecosystem":"npm","epss":0.00562,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-g974-hxvm-x689","id":"tcs_01M5KFR57FDQTA2X47NB02TKDH","modified_at":"2024-11-18T16:27:11Z","published_at":"2024-09-10T06:30:48Z","references":["https://osv.dev/vulnerability/GHSA-g974-hxvm-x689","https://nvd.nist.gov/vuln/detail/CVE-2024-21528","https://github.com/alexanderwallin/node-gettext","https://github.com/alexanderwallin/node-gettext/blob/65d9670f691c2eeca40dce129c95bcf8b613d344/lib/gettext.js#L113","https://security.snyk.io/vuln/SNYK-JS-NODEGETTEXT-6100943"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-g974-hxvm-x689","url":"https://osv.dev/vulnerability/GHSA-g974-hxvm-x689"}],"summary":"node-gettext vulnerable to Prototype Pollution"}