{"action":"Upgrade deep-extend to 0.5.1 or later.","affected":[{"fixed":"0.5.1","introduced":"0"}],"component":"deep-extend","cve_ids":["CVE-2018-3750"],"ecosystem":"npm","epss":0.02147,"exploited":false,"fixed_versions":["0.5.1"],"ghsa_id":"GHSA-hr2v-3952-633q","id":"tcs_01M5KFVXPQ85QRJK8XF6E189RF","modified_at":"2023-11-08T04:00:18.842083Z","published_at":"2018-10-09T00:44:59Z","references":["https://osv.dev/vulnerability/GHSA-hr2v-3952-633q","https://nvd.nist.gov/vuln/detail/CVE-2018-3750","https://github.com/unclechu/node-deep-extend/commit/9423fae877e2ab6b4aecc4db79a0ed63039d4703","https://hackerone.com/reports/311333","https://github.com/advisories/GHSA-hr2v-3952-633q","https://www.npmjs.com/advisories/612"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-hr2v-3952-633q","url":"https://osv.dev/vulnerability/GHSA-hr2v-3952-633q"}],"summary":"Prototype Pollution in deep-extend"}