{"action":"Upgrade properties-reader to 2.2.0 or later.","affected":[{"fixed":"2.2.0","introduced":"0"}],"component":"properties-reader","cve_ids":["CVE-2020-28471"],"ecosystem":"npm","epss":0.01453,"exploited":false,"fixed_versions":["2.2.0"],"ghsa_id":"GHSA-jxvf-m3x5-mxwq","id":"tcs_01M5KFZ7WBCFJT0RZKCXA4R9X3","modified_at":"2023-11-08T04:03:27.747394Z","published_at":"2022-07-19T14:28:59Z","references":["https://osv.dev/vulnerability/GHSA-jxvf-m3x5-mxwq","https://nvd.nist.gov/vuln/detail/CVE-2020-28471","https://github.com/steveukx/properties/issues/40","https://github.com/steveukx/properties/commit/0877cc871db9865f58dd9389ce99e61be05380a5","https://github.com/steveukx/properties/commit/4e4bc392ecfd0a128f48c1d69f64a0d7194fcaab","https://github.com/steveukx/properties","https://security.snyk.io/vuln/SNYK-JS-PROPERTIESREADER-1048968"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-jxvf-m3x5-mxwq","url":"https://osv.dev/vulnerability/GHSA-jxvf-m3x5-mxwq"}],"summary":"Properties-Reader before v2.2.0 vulnerable to prototype pollution"}