{"action":"Upgrade jointjs to 3.3.0 or later.","affected":[{"fixed":"3.3.0","introduced":"0"}],"component":"jointjs","cve_ids":["CVE-2020-28480"],"ecosystem":"npm","epss":0.01376,"exploited":false,"fixed_versions":["3.3.0"],"ghsa_id":"GHSA-qwp9-52h8-xgg8","id":"tcs_01M5KG7CHJBG2SA19QQR3TPP4N","modified_at":"2025-01-14T08:57:24.617253Z","published_at":"2021-01-20T21:21:16Z","references":["https://osv.dev/vulnerability/GHSA-qwp9-52h8-xgg8","https://nvd.nist.gov/vuln/detail/CVE-2020-28480","https://github.com/clientIO/joint/pull/1406","https://github.com/clientIO/joint/blob/master/src/util/util.mjs%23L150","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1062037","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1062036","https://snyk.io/vuln/SNYK-JS-JOINTJS-1024444"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-qwp9-52h8-xgg8","url":"https://osv.dev/vulnerability/GHSA-qwp9-52h8-xgg8"}],"summary":"Prototype pollution in JointJS"}