{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.5.0"}],"component":"object-extend","cve_ids":["CVE-2021-23702"],"ecosystem":"npm","epss":0.01378,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-m639-9whg-fw97","id":"tcs_01M5KFZR4KWCCYND3466PY14HG","modified_at":"2026-03-14T01:41:21.731610Z","published_at":"2022-02-19T00:01:25Z","references":["https://osv.dev/vulnerability/GHSA-m639-9whg-fw97","https://nvd.nist.gov/vuln/detail/CVE-2021-23702","https://github.com/bernhardw/object-extend","https://snyk.io/vuln/SNYK-JS-OBJECTEXTEND-2401470"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-m639-9whg-fw97","url":"https://osv.dev/vulnerability/GHSA-m639-9whg-fw97"}],"summary":"Prototype Pollution in object-extend"}