{"action":"Upgrade chart.js to 2.9.4 or later.","affected":[{"fixed":"2.9.4","introduced":"0"}],"component":"chart.js","cve_ids":["CVE-2020-7746"],"ecosystem":"npm","epss":0.04735,"exploited":false,"fixed_versions":["2.9.4"],"ghsa_id":"GHSA-h68q-55jf-x68w","id":"tcs_01M5KFTAXDS5RQ5KV90FXY4A0H","modified_at":"2025-01-14T08:57:32.355272Z","published_at":"2021-05-10T18:47:53Z","references":["https://osv.dev/vulnerability/GHSA-h68q-55jf-x68w","https://nvd.nist.gov/vuln/detail/CVE-2020-7746","https://github.com/chartjs/Chart.js/pull/7920","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1019375","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBCHARTJS-1019376","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1019374","https://snyk.io/vuln/SNYK-JS-CHARTJS-1018716"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-h68q-55jf-x68w","url":"https://osv.dev/vulnerability/GHSA-h68q-55jf-x68w"}],"summary":"Prototype pollution in chart.js"}