{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.1.0"}],"component":"mockjs","cve_ids":["CVE-2023-26158"],"ecosystem":"npm","epss":0.00801,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-mh8j-9jvh-gjf6","id":"tcs_01M5KG0S4QD6PMSNZ45CB4DAVK","modified_at":"2023-12-08T16:11:28.865673Z","published_at":"2023-12-08T06:30:38Z","references":["https://osv.dev/vulnerability/GHSA-mh8j-9jvh-gjf6","https://nvd.nist.gov/vuln/detail/CVE-2023-26158","https://github.com/nuysoft/Mock","https://github.com/nuysoft/Mock/blob/00ce04b92eb464e664a4438430903f2de96efb47/dist/mock.js#L721-L755","https://security.snyk.io/vuln/SNYK-JS-MOCKJS-6051365"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GHSA-mh8j-9jvh-gjf6","url":"https://osv.dev/vulnerability/GHSA-mh8j-9jvh-gjf6"}],"summary":"mockjs vulnerable to Prototype Pollution via the Util.extend function"}