{"action":"Upgrade total.js to 3.4.9 or later.","affected":[{"fixed":"3.4.9","introduced":"0"}],"component":"total.js","cve_ids":["CVE-2021-32831"],"ecosystem":"npm","epss":0.01466,"exploited":false,"fixed_versions":["3.4.9"],"ghsa_id":"GHSA-vwhc-pww7-72x6","id":"tcs_01M5KGD4RT35HK3JBPXJ5TVH6G","modified_at":"2023-11-08T04:06:01.802752Z","published_at":"2021-09-01T18:24:05Z","references":["https://osv.dev/vulnerability/GHSA-vwhc-pww7-72x6","https://nvd.nist.gov/vuln/detail/CVE-2021-32831","https://github.com/totaljs/framework/commit/887b0fa9e162ef7a2dd9cec20a5ca122726373b3","https://github.com/totaljs","https://github.com/totaljs/framework/blob/e644167d5378afdc45cb0156190349b2c07ef235/changes.txt#L11","https://securitylab.github.com/advisories/GHSL-2021-066-totaljs-totaljs","https://www.npmjs.com/package/total.js"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-vwhc-pww7-72x6","url":"https://osv.dev/vulnerability/GHSA-vwhc-pww7-72x6"}],"summary":"Code Injection in total.js"}