{"action":"Upgrade object-path to 0.11.6 or later.","affected":[{"fixed":"0.11.6","introduced":"0"}],"component":"object-path","cve_ids":["CVE-2021-23434"],"ecosystem":"npm","epss":0.01902,"exploited":false,"fixed_versions":["0.11.6"],"ghsa_id":"GHSA-v39p-96qg-c8rf","id":"tcs_01M5KGAHWZ72DBD3W1W3B163MS","modified_at":"2025-01-14T09:11:55.900225Z","published_at":"2021-09-01T18:37:11Z","references":["https://osv.dev/vulnerability/GHSA-v39p-96qg-c8rf","https://nvd.nist.gov/vuln/detail/CVE-2021-23434","https://github.com/mariocasciaro/object-path/commit/7bdf4abefd102d16c163d633e8994ef154cab9eb","https://github.com/mariocasciaro/object-path","https://github.com/mariocasciaro/object-path#0116","https://github.com/mariocasciaro/object-path%230116","https://lists.debian.org/debian-lts-announce/2023/01/msg00031.html","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1570423","https://snyk.io/vuln/SNYK-JS-OBJECTPATH-1569453"],"severity":{"label":"medium","score":5.6},"sources":[{"source":"osv","source_id":"GHSA-v39p-96qg-c8rf","url":"https://osv.dev/vulnerability/GHSA-v39p-96qg-c8rf"}],"summary":"Prototype Pollution in object-path"}