{"action":"Upgrade node-opcua-alarm-condition to 2.137.0 or later.","affected":[{"fixed":"2.137.0","introduced":"0"}],"component":"node-opcua-alarm-condition","cve_ids":["CVE-2024-57086"],"ecosystem":"npm","epss":0.00443,"exploited":false,"fixed_versions":["2.137.0"],"ghsa_id":"GHSA-gvwq-6fmx-28xm","id":"tcs_01M5KFSM6MTYS3RWMTGTEQJGKJ","modified_at":"2025-04-10T13:57:13.191156Z","published_at":"2025-02-06T06:31:26Z","references":["https://osv.dev/vulnerability/GHSA-gvwq-6fmx-28xm","https://nvd.nist.gov/vuln/detail/CVE-2024-57086","https://github.com/node-opcua/node-opcua/issues/1433#issuecomment-2791824350","https://gist.github.com/tariqhawis/30acc3632cf595ca5825b7ec2b2f795a","https://github.com/node-opcua/node-opcua","https://github.com/node-opcua/node-opcua/blob/330db56bb62bce9fff80382daee1fac94311978d/packages/node-opcua-alarm-condition/test/test_cve_polution_attack.ts"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GHSA-gvwq-6fmx-28xm","url":"https://osv.dev/vulnerability/GHSA-gvwq-6fmx-28xm"}],"summary":"node-opcua-alarm-condition prototype pollution vulnerability"}