{"action":"Upgrade dset to 2.0.1 or later.","affected":[{"fixed":"2.0.1","introduced":"1.0.0"}],"component":"dset","cve_ids":["CVE-2020-28277"],"ecosystem":"npm","epss":0.03071,"exploited":false,"fixed_versions":["2.0.1"],"ghsa_id":"GHSA-q4xc-7cw8-cgfj","id":"tcs_01M5KG56FA3B0NR9H48S3D6P0A","modified_at":"2024-02-01T21:42:21.637990Z","published_at":"2022-05-24T17:37:26Z","references":["https://osv.dev/vulnerability/GHSA-q4xc-7cw8-cgfj","https://nvd.nist.gov/vuln/detail/CVE-2020-28277","https://github.com/lukeed/dset/issues/11","https://github.com/lukeed/dset/commit/2b9ec49e231107b1a83b04a1bc1a66a8d14cea1c","https://github.com/lukeed/dset/blob/50a6ead172d1466a96035eff00f8eb465ccd050a/src/index.js#L6","https://web.archive.org/web/20210104204657/https://www.whitesourcesoftware.com/vulnerability-database/CVE-2020-28277"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-q4xc-7cw8-cgfj","url":"https://osv.dev/vulnerability/GHSA-q4xc-7cw8-cgfj"}],"summary":"dset vulnerable to prototype pollution"}