{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.4.3"}],"component":"jsgui-lang-essentials","cve_ids":["CVE-2022-25301"],"ecosystem":"npm","epss":0.01236,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-p3pg-64pv-v7jg","id":"tcs_01M5KG2D6PVMND8AZKBFW887XZ","modified_at":"2023-11-08T04:08:45.619445Z","published_at":"2022-05-03T00:00:44Z","references":["https://osv.dev/vulnerability/GHSA-p3pg-64pv-v7jg","https://nvd.nist.gov/vuln/detail/CVE-2022-25301","https://github.com/metabench/jsgui-lang-essentials/issues/1","https://github.com/metabench/jsgui-lang-essentials","https://snyk.io/vuln/SNYK-JS-JSGUILANGESSENTIALS-2316897"],"severity":{"label":"high","score":7.7},"sources":[{"source":"osv","source_id":"GHSA-p3pg-64pv-v7jg","url":"https://osv.dev/vulnerability/GHSA-p3pg-64pv-v7jg"}],"summary":"Prototype Pollution in jsgui-lang-essentials"}