{"action":"Upgrade qs to 6.0.4 or later.","affected":[{"fixed":"6.0.4","introduced":"0"},{"fixed":"6.1.2","introduced":"6.1.0"},{"fixed":"6.2.3","introduced":"6.2.0"},{"fixed":"6.3.2","introduced":"6.3.0"}],"component":"qs","cve_ids":["CVE-2017-1000048"],"ecosystem":"npm","epss":0.02415,"exploited":false,"fixed_versions":["6.0.4","6.1.2","6.2.3","6.3.2"],"ghsa_id":"GHSA-gqgv-6jq5-jjj9","id":"tcs_01M5KFSB0Q1ARKVYPABNC6537N","modified_at":"2023-11-08T03:58:42.086259Z","published_at":"2020-04-30T17:16:47Z","references":["https://osv.dev/vulnerability/GHSA-gqgv-6jq5-jjj9","https://nvd.nist.gov/vuln/detail/CVE-2017-1000048","https://github.com/ljharb/qs/issues/200","https://github.com/ljharb/qs/commit/beade029171b8cef9cee0d03ebe577e2dd84976d","https://access.redhat.com/errata/RHSA-2017:2672","https://github.com/ljharb/qs","https://snyk.io/vuln/npm:qs:20170213","https://www.npmjs.com/advisories/1469"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-gqgv-6jq5-jjj9","url":"https://osv.dev/vulnerability/GHSA-gqgv-6jq5-jjj9"}],"summary":"Prototype Pollution Protection Bypass in qs"}