{"action":"Upgrade set-in to 2.0.1 or later.","affected":[{"fixed":"2.0.1","introduced":"0"}],"component":"set-in","cve_ids":["CVE-2020-28273"],"ecosystem":"npm","epss":0.04045,"exploited":false,"fixed_versions":["2.0.1"],"ghsa_id":"GHSA-qr4p-c9wr-phr6","id":"tcs_01M5KG70CEH5HAD12XCD6K1MTG","modified_at":"2023-11-08T04:03:24.708898Z","published_at":"2021-03-19T21:01:46Z","references":["https://osv.dev/vulnerability/GHSA-qr4p-c9wr-phr6","https://nvd.nist.gov/vuln/detail/CVE-2020-28273","https://github.com/ahdinosaur/set-in/commit/e431effa00195a6f06b111e09733cd1445a91a88","https://www.whitesourcesoftware.com/vulnerability-database/CVE-2020-28273"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-qr4p-c9wr-phr6","url":"https://osv.dev/vulnerability/GHSA-qr4p-c9wr-phr6"}],"summary":"Prototype pollution in set-in"}