{"action":"Upgrade doc-path to 2.1.2 or later.","affected":[{"fixed":"2.1.2","introduced":"0"}],"component":"doc-path","cve_ids":["CVE-2020-7772"],"ecosystem":"npm","epss":0.02775,"exploited":false,"fixed_versions":["2.1.2"],"ghsa_id":"GHSA-gm8g-xhh8-rmwr","id":"tcs_01M5KFS0QXG3J1YNC007KJ1WV0","modified_at":"2026-07-08T06:49:46.722174440Z","published_at":"2021-05-10T19:17:25Z","references":["https://osv.dev/vulnerability/GHSA-gm8g-xhh8-rmwr","https://nvd.nist.gov/vuln/detail/CVE-2020-7772","https://github.com/mrodrig/doc-path/commit/3e2bb168cf303bffcd7fae5f8d05e5300c1541c7","https://github.com/mrodrig/doc-path/blob/stable/src/path.js%23L54","https://snyk.io/vuln/SNYK-JS-DOCPATH-1011952"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-gm8g-xhh8-rmwr","url":"https://osv.dev/vulnerability/GHSA-gm8g-xhh8-rmwr"}],"summary":"Prototype Pollution in doc-path"}