{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"4.0.0-alpha.45"}],"component":"@aofl/cli-lib","cve_ids":["CVE-2024-38987"],"ecosystem":"npm","epss":0.00514,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-vg6v-jcg3-5mp7","id":"tcs_01M5KGBT7KQBEDGTKC44VX2TDB","modified_at":"2024-07-11T18:12:31.966244Z","published_at":"2024-07-01T15:32:09Z","references":["https://osv.dev/vulnerability/GHSA-vg6v-jcg3-5mp7","https://nvd.nist.gov/vuln/detail/CVE-2024-38987","https://github.com/AgeOfLearning/aofl/issues/35","https://gist.github.com/mestrtee/29636943e6989e67f38251580cbcea73","https://github.com/AgeOfLearning/aofl"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-vg6v-jcg3-5mp7","url":"https://osv.dev/vulnerability/GHSA-vg6v-jcg3-5mp7"}],"summary":"@aofl/cli-lib Prototype Pollution vulnerability"}