{"action":"Upgrade algoliasearch-helper to 3.6.2 or later.","affected":[{"fixed":"3.6.2","introduced":"0"}],"component":"algoliasearch-helper","cve_ids":["CVE-2021-23433"],"ecosystem":"npm","epss":0.01947,"exploited":false,"fixed_versions":["3.6.2"],"ghsa_id":"GHSA-vpf5-82c8-9v36","id":"tcs_01M5KGCJCHGMKQB5H66K2AKT14","modified_at":"2026-09-10T03:49:16.257548510Z","published_at":"2021-11-23T21:15:35Z","references":["https://osv.dev/vulnerability/GHSA-vpf5-82c8-9v36","https://nvd.nist.gov/vuln/detail/CVE-2021-23433","https://github.com/algolia/algoliasearch-helper-js/commit/4ff542b70b92a6b81cce8b9255700b0bc0817edd","https://github.com/algolia/algoliasearch-helper-js","https://github.com/algolia/algoliasearch-helper-js/blob/3.5.5/src/SearchParameters/index.js%23L291","https://snyk.io/vuln/SNYK-JS-ALGOLIASEARCHHELPER-1570421"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-vpf5-82c8-9v36","url":"https://osv.dev/vulnerability/GHSA-vpf5-82c8-9v36"}],"summary":"Prototype Pollution in algoliasearch-helper"}