{"action":"Upgrade rfc6902 to 5.0.0 or later.","affected":[{"fixed":"5.0.0","introduced":"0"}],"component":"rfc6902","cve_ids":["CVE-2021-4245"],"ecosystem":"npm","epss":0.01352,"exploited":false,"fixed_versions":["5.0.0"],"ghsa_id":"GHSA-p495-jxh2-wrfg","id":"tcs_01M5KG2G5N5YVCY7CT2ZR55070","modified_at":"2023-11-08T04:07:06.332053Z","published_at":"2022-12-15T21:30:28Z","references":["https://osv.dev/vulnerability/GHSA-p495-jxh2-wrfg","https://nvd.nist.gov/vuln/detail/CVE-2021-4245","https://github.com/chbrown/rfc6902/issues/84","https://github.com/chbrown/rfc6902/pull/76","https://github.com/chbrown/rfc6902/commit/c006ce9faa43d31edb34924f1df7b79c137096cf","https://github.com/chbrown/rfc6902","https://vuldb.com/?id.215883"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-p495-jxh2-wrfg","url":"https://osv.dev/vulnerability/GHSA-p495-jxh2-wrfg"}],"summary":"npm package rfc6902 vulnerable to Prototype Pollution"}