{"action":"Upgrade @alizeait/unflatto to 1.0.3 or later.","affected":[{"fixed":"1.0.3","introduced":"0"}],"component":"@alizeait/unflatto","cve_ids":["CVE-2024-38988"],"ecosystem":"npm","epss":0.00873,"exploited":false,"fixed_versions":["1.0.3"],"ghsa_id":"GHSA-q8jq-4rm5-4hm5","id":"tcs_01M5KG5PKHFN8T1JVGC2XVRFC4","modified_at":"2025-04-01T15:27:10.959920Z","published_at":"2025-04-01T14:54:36Z","references":["https://osv.dev/vulnerability/GHSA-q8jq-4rm5-4hm5","https://github.com/alizeait/unflatto/security/advisories/GHSA-q8jq-4rm5-4hm5","https://nvd.nist.gov/vuln/detail/CVE-2024-38988","https://github.com/alizeait/unflatto/issues/32","https://github.com/alizeait/unflatto/commit/3c1b120f1dcd44eefe07d4a5022e1baa3c7164d3","https://gist.github.com/mestrtee/4c5dfb66bea377889c44dd6c8af28713","https://github.com/alizeait/unflatto"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-q8jq-4rm5-4hm5","url":"https://osv.dev/vulnerability/GHSA-q8jq-4rm5-4hm5"}],"summary":"@alizeait/unflatto Prototype Pollution"}