{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0.0.11","last_affected":"0.9.3"}],"component":"underscore-keypath","cve_ids":["CVE-2023-26139"],"ecosystem":"npm","epss":0.00886,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-gpvc-mx6g-cchv","id":"tcs_01M5KFS7SMD893WJBY8EMK3MPR","modified_at":"2023-11-08T04:11:59.621730Z","published_at":"2023-08-01T06:30:15Z","references":["https://osv.dev/vulnerability/GHSA-gpvc-mx6g-cchv","https://nvd.nist.gov/vuln/detail/CVE-2023-26139","https://gist.github.com/lelecolacola123/cc0d1e73780127aea9482c05f2ff3252","https://github.com/jeeeyul/underscore-keypath","https://security.snyk.io/vuln/SNYK-JS-UNDERSCOREKEYPATH-5416714"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-gpvc-mx6g-cchv","url":"https://osv.dev/vulnerability/GHSA-gpvc-mx6g-cchv"}],"summary":"underscore-keypath vulnerable to Prototype Pollution"}