{"action":"Upgrade typeorm to 0.2.25 or later.","affected":[{"fixed":"0.2.25","introduced":"0"}],"component":"typeorm","cve_ids":["CVE-2020-8158"],"ecosystem":"npm","epss":0.0212,"exploited":false,"fixed_versions":["0.2.25"],"ghsa_id":"GHSA-pf2j-9qmp-jqr2","id":"tcs_01M5KG3CF53Y830V9AXF2RVGBZ","modified_at":"2023-11-08T04:04:14.505830Z","published_at":"2021-05-07T16:46:42Z","references":["https://osv.dev/vulnerability/GHSA-pf2j-9qmp-jqr2","https://nvd.nist.gov/vuln/detail/CVE-2020-8158","https://hackerone.com/reports/869574"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-pf2j-9qmp-jqr2","url":"https://osv.dev/vulnerability/GHSA-pf2j-9qmp-jqr2"}],"summary":"TypeORM vulnerable to MAID and Prototype Pollution"}