{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.16.4"}],"component":"dojo","cve_ids":["CVE-2021-23450"],"ecosystem":"npm","epss":0.30367,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-m8gw-hjpr-rjv7","id":"tcs_01M5KG05KATMX13KYG0S15S2B3","modified_at":"2025-01-14T09:12:14.277759Z","published_at":"2022-01-05T15:01:46Z","references":["https://osv.dev/vulnerability/GHSA-m8gw-hjpr-rjv7","https://nvd.nist.gov/vuln/detail/CVE-2021-23450","https://github.com/dojo/dojo","https://github.com/dojo/dojo/blob/4c39c14349408fc8274e19b399ffc660512ed07c/_base/lang.js%23L172","https://lists.debian.org/debian-lts-announce/2023/01/msg00030.html","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-2313036","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-2313035","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBDOJO-2313034","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2313033","https://snyk.io/vuln/SNYK-JS-DOJO-1535223","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujul2022.html"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-m8gw-hjpr-rjv7","url":"https://osv.dev/vulnerability/GHSA-m8gw-hjpr-rjv7"}],"summary":"Prototype Pollution in dojo"}