{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.2.3"}],"component":"dot-lens","cve_ids":["CVE-2023-26106"],"ecosystem":"npm","epss":0.00947,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-rmhg-2cvv-q7vx","id":"tcs_01M5KG9DN12EB733NYEG3YPXKM","modified_at":"2023-11-08T04:11:57.894398Z","published_at":"2023-03-06T06:30:18Z","references":["https://osv.dev/vulnerability/GHSA-rmhg-2cvv-q7vx","https://nvd.nist.gov/vuln/detail/CVE-2023-26106","https://github.com/jb55/dot-lens","https://github.com/jb55/dot-lens/blob/465ef2088e4065b7be1c4372eedd2215c3820bc4/index.js#23L70","https://security.snyk.io/vuln/SNYK-JS-DOTLENS-3227646"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-rmhg-2cvv-q7vx","url":"https://osv.dev/vulnerability/GHSA-rmhg-2cvv-q7vx"}],"summary":"dot-lens vulnerable to Prototype Pollution"}