{"action":"Upgrade dynamoose to 2.7.0 or later.","affected":[{"fixed":"2.7.0","introduced":"2.0.0"}],"component":"dynamoose","cve_ids":["CVE-2021-21304"],"ecosystem":"npm","epss":0.01917,"exploited":false,"fixed_versions":["2.7.0"],"ghsa_id":"GHSA-rrqm-p222-8ph2","id":"tcs_01M5KG9SZTGHQ1P4BD1Y6FP9DJ","modified_at":"2026-09-10T03:48:25.799290808Z","published_at":"2021-02-08T17:44:01Z","references":["https://osv.dev/vulnerability/GHSA-rrqm-p222-8ph2","https://github.com/dynamoose/dynamoose/security/advisories/GHSA-rrqm-p222-8ph2","https://nvd.nist.gov/vuln/detail/CVE-2021-21304","https://github.com/dynamoose/dynamoose/commit/324c62b4709204955931a187362f8999805b1d8e","https://github.com/dynamoose/dynamoose","https://github.com/dynamoose/dynamoose/releases/tag/v2.7.0","https://www.npmjs.com/package/dynamoose"],"severity":{"label":"high","score":7.2},"sources":[{"source":"osv","source_id":"GHSA-rrqm-p222-8ph2","url":"https://osv.dev/vulnerability/GHSA-rrqm-p222-8ph2"}],"summary":"Prototype Pollution in Dynamoose"}