{"action":"Upgrade deepmerge-ts to 4.0.2 or later.","affected":[{"fixed":"4.0.2","introduced":"0"}],"component":"deepmerge-ts","cve_ids":["CVE-2022-24802"],"ecosystem":"npm","epss":0.01678,"exploited":false,"fixed_versions":["4.0.2"],"ghsa_id":"GHSA-r9w3-g83q-m6hq","id":"tcs_01M5KG8PGSDP6Q0N66B7NSJ2P8","modified_at":"2023-11-08T04:08:37.079900Z","published_at":"2022-04-01T17:26:03Z","references":["https://osv.dev/vulnerability/GHSA-r9w3-g83q-m6hq","https://github.com/RebeccaStevens/deepmerge-ts/security/advisories/GHSA-r9w3-g83q-m6hq","https://nvd.nist.gov/vuln/detail/CVE-2022-24802","https://github.com/RebeccaStevens/deepmerge-ts/commit/b39f1a93d9e1c3541bd2fe159fd696a16dbe1c72","https://github.com/RebeccaStevens/deepmerge-ts/commit/d637db7e4fb2bfb113cb4bc1c85a125936d7081b","https://github.com/RebeccaStevens/deepmerge-ts"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-r9w3-g83q-m6hq","url":"https://osv.dev/vulnerability/GHSA-r9w3-g83q-m6hq"}],"summary":"Prototype Pollution in deepmerge-ts"}