{"action":"Upgrade predefine to 0.1.3 or later.","affected":[{"fixed":"0.1.3","introduced":"0"}],"component":"predefine","cve_ids":["CVE-2020-28280"],"ecosystem":"npm","epss":0.03071,"exploited":false,"fixed_versions":["0.1.3"],"ghsa_id":"GHSA-mx3x-ghqm-r43h","id":"tcs_01M5KG20PD1GYD15MAJB9XEJBZ","modified_at":"2023-11-08T04:03:24.829070Z","published_at":"2021-10-12T16:27:18Z","references":["https://osv.dev/vulnerability/GHSA-mx3x-ghqm-r43h","https://nvd.nist.gov/vuln/detail/CVE-2020-28280","https://github.com/bigpipe/predefine/commit/1a86a013c0b37c9d6ca078ba34017052af38b7fc","https://github.com/bigpipe/predefine","https://github.com/bigpipe/predefine/blob/238137e3d1b8288ff5d7529c3cbcdd371888c26b/index.js#L284","https://www.whitesourcesoftware.com/vulnerability-database/CVE-2020-28280"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-mx3x-ghqm-r43h","url":"https://osv.dev/vulnerability/GHSA-mx3x-ghqm-r43h"}],"summary":"Prototype pollution vulnerability in 'predefine'"}