{"action":"Upgrade objection to 2.2.16 or later.","affected":[{"fixed":"2.2.16","introduced":"0"}],"component":"objection","cve_ids":["CVE-2021-3766"],"ecosystem":"npm","epss":0.0147,"exploited":false,"fixed_versions":["2.2.16"],"ghsa_id":"GHSA-r659-8xfp-j327","id":"tcs_01M5KG86FMTM69H5QEHYAT345Z","modified_at":"2023-11-08T04:06:20.840149Z","published_at":"2021-09-07T23:09:43Z","references":["https://osv.dev/vulnerability/GHSA-r659-8xfp-j327","https://nvd.nist.gov/vuln/detail/CVE-2021-3766","https://github.com/Vincit/objection.js/commit/46b842a6bc897198b83f41ac85c92864b991d7e9","https://github.com/vincit/objection.js/commit/b41aab8dcd78f426f7468dcda541a7aca18a66a6","https://github.com/vincit/objection.js","https://huntr.dev/bounties/c98e0f0e-ebf2-4072-be73-a1848ea031cc"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-r659-8xfp-j327","url":"https://osv.dev/vulnerability/GHSA-r659-8xfp-j327"}],"summary":"objection.js Prototype Pollution vulnerability"}