{"action":"Upgrade fullpage.js to 4.0.2 or later.","affected":[{"fixed":"4.0.2","introduced":"0"}],"component":"fullpage.js","cve_ids":["CVE-2022-1295"],"ecosystem":"npm","epss":0.01291,"exploited":false,"fixed_versions":["4.0.2"],"ghsa_id":"GHSA-vpgw-ffh3-648h","id":"tcs_01M5KGCJYJ1Z92XAA6SC4KJMM7","modified_at":"2023-11-08T04:07:47.143170Z","published_at":"2022-04-12T00:00:38Z","references":["https://osv.dev/vulnerability/GHSA-vpgw-ffh3-648h","https://nvd.nist.gov/vuln/detail/CVE-2022-1295","https://github.com/alvarotrigo/fullpage.js/commit/bf62492a22e5d296e63c3ed918a42fc5645a0d48","https://github.com/alvarotrigo/fullpage.js","https://huntr.dev/bounties/3b9d450c-24ac-4037-b04d-4d4dafbf593a"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-vpgw-ffh3-648h","url":"https://osv.dev/vulnerability/GHSA-vpgw-ffh3-648h"}],"summary":"Prototype Pollution in fullpage.js"}