{"action":"Upgrade @apphp/object-resolver to 3.1.1 or later.","affected":[{"fixed":"3.1.1","introduced":"0"}],"component":"@apphp/object-resolver","cve_ids":["CVE-2024-36577"],"ecosystem":"npm","epss":0.00423,"exploited":false,"fixed_versions":["3.1.1"],"ghsa_id":"GHSA-qj86-v6m7-4qv2","id":"tcs_01M5KG6CJ992605AB0CX71DGT6","modified_at":"2024-07-05T21:14:25Z","published_at":"2024-06-17T18:31:33Z","references":["https://osv.dev/vulnerability/GHSA-qj86-v6m7-4qv2","https://nvd.nist.gov/vuln/detail/CVE-2024-36577","https://github.com/apphp/js-object-resolver/commit/7e347a26bf04d6a4f7525f6605666afbb218afca","https://gist.github.com/mestrtee/c90189f3d8480a5f267395ec40701373","https://github.com/apphp/js-object-resolver"],"severity":{"label":"high","score":8.3},"sources":[{"source":"osv","source_id":"GHSA-qj86-v6m7-4qv2","url":"https://osv.dev/vulnerability/GHSA-qj86-v6m7-4qv2"}],"summary":"Object Resolver Prototype Pollution"}