{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.0.0"}],"component":"@akbr/update","cve_ids":["CVE-2024-36578"],"ecosystem":"npm","epss":0.002,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-mj4p-gmhr-92g3","id":"tcs_01M5KG0WMJW4Z2XZFMW2CCA8PA","modified_at":"2024-07-05T17:26:43Z","published_at":"2024-06-17T18:31:34Z","references":["https://osv.dev/vulnerability/GHSA-mj4p-gmhr-92g3","https://nvd.nist.gov/vuln/detail/CVE-2024-36578","https://gist.github.com/mestrtee/8bc749ec2b5453d887b2f4a362a65897","https://github.com/akbr/update"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-mj4p-gmhr-92g3","url":"https://osv.dev/vulnerability/GHSA-mj4p-gmhr-92g3"}],"summary":"@akbr/update Prototype Pollution"}