{"action":"Upgrade deobfuscator to 2.4.4 or later.","affected":[{"fixed":"2.4.4","introduced":"2.0.1"}],"component":"deobfuscator","cve_ids":["CVE-2023-45811"],"ecosystem":"npm","epss":0.0043,"exploited":false,"fixed_versions":["2.4.4"],"ghsa_id":"GHSA-jg82-xh3w-rhxx","id":"tcs_01M5KFXYZYPRA9X021CFMXFPNN","modified_at":"2025-07-22T15:37:30Z","published_at":"2023-10-18T18:27:13Z","references":["https://osv.dev/vulnerability/GHSA-jg82-xh3w-rhxx","https://github.com/relative/synchrony/security/advisories/GHSA-jg82-xh3w-rhxx","https://nvd.nist.gov/vuln/detail/CVE-2023-45811","https://github.com/relative/synchrony/commit/b583126be94c4db7c5a478f1c5204bfb4162cf40","https://github.com/relative/synchrony","https://github.com/relative/synchrony/security/advisories/src/transformers/literalmap.ts"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"GHSA-jg82-xh3w-rhxx","url":"https://osv.dev/vulnerability/GHSA-jg82-xh3w-rhxx"}],"summary":"Synchrony deobfuscator prototype pollution vulnerability leading to arbitrary code execution"}