{"action":"Upgrade @grpc/grpc-js to 1.1.8 or later.","affected":[{"fixed":"1.1.8","introduced":"0"}],"component":"@grpc/grpc-js","cve_ids":["CVE-2020-7768"],"ecosystem":"npm","epss":0.04026,"exploited":false,"fixed_versions":["1.1.8"],"ghsa_id":"GHSA-pp75-xfpw-37g9","id":"tcs_01M5KG43HJDN21W4H2XQPF8V78","modified_at":"2025-01-14T08:57:34.513174Z","published_at":"2021-05-10T19:16:14Z","references":["https://osv.dev/vulnerability/GHSA-pp75-xfpw-37g9","https://nvd.nist.gov/vuln/detail/CVE-2020-7768","https://github.com/grpc/grpc-node/pull/1605","https://github.com/grpc/grpc-node/pull/1606","https://github.com/grpc/grpc-node/releases/tag/grpc%401.24.4","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1038819","https://snyk.io/vuln/SNYK-JS-GRPC-598671","https://snyk.io/vuln/SNYK-JS-GRPCGRPCJS-1038818","https://www.npmjs.com/package/@grpc/grpc-js","https://www.npmjs.com/package/grpc"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-pp75-xfpw-37g9#npm/@grpc/grpc-js","url":"https://osv.dev/vulnerability/GHSA-pp75-xfpw-37g9"}],"summary":"Prototype pollution in grpc and @grpc/grpc-js"}