{"action":"Upgrade json-logic-js to 2.0.0 or later.","affected":[{"fixed":"2.0.0","introduced":"0"}],"component":"json-logic-js","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["2.0.0"],"ghsa_id":"GHSA-m9hw-7xfv-wqg7","id":"tcs_01M5KG0D287KQ7JGABQN78YM2X","modified_at":"2020-11-12T19:35:53Z","published_at":"2020-11-12T19:36:14Z","references":["https://osv.dev/vulnerability/GHSA-m9hw-7xfv-wqg7","https://github.com/jwadhams/json-logic-js/commit/fadfa5dc7ccd1cc5c9a1900a97a15af390bf642b","https://www.npmjs.com/advisories/1542","https://www.npmjs.com/package/json-logic-js"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-m9hw-7xfv-wqg7","url":"https://osv.dev/vulnerability/GHSA-m9hw-7xfv-wqg7"}],"summary":"Prototype Pollution in json-logic-js"}