{"action":"Upgrade mixme to 0.5.1 or later.","affected":[{"fixed":"0.5.1","introduced":"0"}],"component":"mixme","cve_ids":["CVE-2021-28860","CVE-2021-29491"],"ecosystem":"npm","epss":0.01843,"exploited":false,"fixed_versions":["0.5.1"],"ghsa_id":"GHSA-r5cq-9537-9rpf","id":"tcs_01M5KG8098B09DKG5102C6N5PZ","modified_at":"2026-09-10T03:49:12.874649745Z","published_at":"2022-02-10T23:52:01Z","references":["https://osv.dev/vulnerability/GHSA-r5cq-9537-9rpf","https://github.com/adaltas/node-mixme/security/advisories/GHSA-79jw-6wg7-r9g4","https://nvd.nist.gov/vuln/detail/CVE-2021-28860","https://github.com/adaltas/node-mixme/issues/1","https://github.com/adaltas/node-mixme/commit/cfd5fbfc32368bcf7e06d1c5985ea60e34cd4028","https://github.com/adaltas/node-mixme","https://security.netapp.com/advisory/ntap-20210618-0005","https://www.npmjs.com/~david","http://nodejs.com"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-r5cq-9537-9rpf","url":"https://osv.dev/vulnerability/GHSA-r5cq-9537-9rpf"}],"summary":"Prototype Pollution in mixme"}