{"action":"Upgrade @bunt/app to 0.29.26 or later.","affected":[{"fixed":"0.29.26","introduced":"0"}],"component":"@bunt/app","cve_ids":["CVE-2024-38989"],"ecosystem":"npm","epss":0.01104,"exploited":false,"fixed_versions":["0.29.26"],"ghsa_id":"GHSA-p734-xg27-8cfq","id":"tcs_01M5KG2VBXFSSECG3V2Q62N8V2","modified_at":"2024-08-13T19:42:15.665192Z","published_at":"2024-08-12T15:30:49Z","references":["https://osv.dev/vulnerability/GHSA-p734-xg27-8cfq","https://nvd.nist.gov/vuln/detail/CVE-2024-38989","https://github.com/izatop/bunt/issues/27","https://github.com/izatop/bunt/commit/c55201a8cee03e5282f99874dead988c80d31db7","https://gist.github.com/mestrtee/5e9830fb180a34d65f04fafb52d2b94b","https://github.com/izatop/bunt"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-p734-xg27-8cfq","url":"https://osv.dev/vulnerability/GHSA-p734-xg27-8cfq"}],"summary":"Prototype pollution in izatop bunt"}