{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.1.4"}],"component":"arr-flatten-unflatten","cve_ids":["CVE-2020-7713"],"ecosystem":"npm","epss":0.01916,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-w8f3-pvx4-4c3h","id":"tcs_01M5KGEG6M9MQXS39GSMXRQSVC","modified_at":"2023-11-08T04:04:06.357175Z","published_at":"2021-05-06T18:11:39Z","references":["https://osv.dev/vulnerability/GHSA-w8f3-pvx4-4c3h","https://nvd.nist.gov/vuln/detail/CVE-2020-7713","https://github.com/Quernest/arr-flatten-unflatten/pull/8","https://github.com/Quernest/arr-flatten-unflatten/commit/cb4351c75f87a4fbec3b6140c40ee2993f574372","https://snyk.io/vuln/SNYK-JS-ARRFLATTENUNFLATTEN-598396"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-w8f3-pvx4-4c3h","url":"https://osv.dev/vulnerability/GHSA-w8f3-pvx4-4c3h"}],"summary":"Prototype Pollution in arr-flatten-unflatten"}