{"action":"Upgrade dot-object to 2.1.3 or later.","affected":[{"fixed":"2.1.3","introduced":"0"}],"component":"dot-object","cve_ids":["CVE-2019-10793"],"ecosystem":"npm","epss":0.01098,"exploited":false,"fixed_versions":["2.1.3"],"ghsa_id":"GHSA-j9cf-pr2x-5273","id":"tcs_01M5KFXH6D3WXD1800DC4C00QB","modified_at":"2026-09-10T03:49:28.042451946Z","published_at":"2022-02-09T22:33:31Z","references":["https://osv.dev/vulnerability/GHSA-j9cf-pr2x-5273","https://nvd.nist.gov/vuln/detail/CVE-2019-10793","https://github.com/rhalff/dot-object/commit/f76cff5fe6d01d30ce110d8f454db2e5bd28a7de","https://github.com/rhalff/dot-object","https://snyk.io/vuln/SNYK-JS-DOTOBJECT-548905"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-j9cf-pr2x-5273","url":"https://osv.dev/vulnerability/GHSA-j9cf-pr2x-5273"}],"summary":"Prototype Pollution in dot-object"}