{"action":"Upgrade @irrelon/path to 4.7.0 or later.","affected":[{"fixed":"4.7.0","introduced":"0"}],"component":"@irrelon/path","cve_ids":["CVE-2020-7708"],"ecosystem":"npm","epss":0.02821,"exploited":false,"fixed_versions":["4.7.0"],"ghsa_id":"GHSA-j7cg-h9v9-6vqp","id":"tcs_01M5KFX8NE598ZPPMFZQ7KZ4HJ","modified_at":"2025-01-14T08:56:53.180660Z","published_at":"2021-05-06T17:29:19Z","references":["https://osv.dev/vulnerability/GHSA-j7cg-h9v9-6vqp","https://nvd.nist.gov/vuln/detail/CVE-2020-7708","https://github.com/Irrelon/irrelon-path/commit/8a126b160c1a854ae511659c111413ad9910ebe3","https://github.com/Irrelon/irrelon-path","https://snyk.io/vuln/SNYK-JS-IRRELONPATH-598672","https://snyk.io/vuln/SNYK-JS-IRRELONPATH-598673"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-j7cg-h9v9-6vqp#npm/@irrelon/path","url":"https://osv.dev/vulnerability/GHSA-j7cg-h9v9-6vqp"}],"summary":"Prototype Pollution in irrelon-path and @irrelon/path"}