{"action":"Upgrade @antfu/utils to 0.7.3 or later.","affected":[{"fixed":"0.7.3","introduced":"0"}],"component":"@antfu/utils","cve_ids":["CVE-2023-2972"],"ecosystem":"npm","epss":0.00991,"exploited":false,"fixed_versions":["0.7.3"],"ghsa_id":"GHSA-p2fh-2h23-6grg","id":"tcs_01M5KG26XME4YW7KCDMQQ472MH","modified_at":"2023-11-08T04:12:21.184330Z","published_at":"2023-05-30T12:30:17Z","references":["https://osv.dev/vulnerability/GHSA-p2fh-2h23-6grg","https://nvd.nist.gov/vuln/detail/CVE-2023-2972","https://github.com/antfu/utils/commit/7f8b16c6181c988bdb96613fbb2533b345f68682","https://github.com/antfu/utils","https://huntr.dev/bounties/009f1cd9-401c-49a7-bd08-be35cff6faef"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-p2fh-2h23-6grg","url":"https://osv.dev/vulnerability/GHSA-p2fh-2h23-6grg"}],"summary":"antfu/utils vulnerable to prototype pollution"}