{"action":"Upgrade mpath to 0.5.1 or later.","affected":[{"fixed":"0.5.1","introduced":"0"}],"component":"mpath","cve_ids":["CVE-2018-16490"],"ecosystem":"npm","epss":0.01101,"exploited":false,"fixed_versions":["0.5.1"],"ghsa_id":"GHSA-h466-j336-74wx","id":"tcs_01M5KFT41BQAX57XRHEFHV1W3H","modified_at":"2023-11-08T04:00:00.932917Z","published_at":"2019-02-07T18:17:26Z","references":["https://osv.dev/vulnerability/GHSA-h466-j336-74wx","https://nvd.nist.gov/vuln/detail/CVE-2018-16490","https://hackerone.com/reports/390860","https://github.com/advisories/GHSA-h466-j336-74wx","https://www.npmjs.com/advisories/779"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-h466-j336-74wx","url":"https://osv.dev/vulnerability/GHSA-h466-j336-74wx"}],"summary":"Prototype Pollution in mpath"}