{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.2.5"}],"component":"@cat5th/key-serializer","cve_ids":["CVE-2024-39018"],"ecosystem":"npm","epss":0.00419,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-whpx-g542-7c7v","id":"tcs_01M5KGF60V62DF060X3JEMQW0D","modified_at":"2024-07-11T18:12:32.039087Z","published_at":"2024-07-01T15:32:30Z","references":["https://osv.dev/vulnerability/GHSA-whpx-g542-7c7v","https://nvd.nist.gov/vuln/detail/CVE-2024-39018","https://gist.github.com/mestrtee/be75c60307b2292884cc03cebd361f3f","https://github.com/harvey-woo/key-serializer"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-whpx-g542-7c7v","url":"https://osv.dev/vulnerability/GHSA-whpx-g542-7c7v"}],"summary":"@cat5th/key-serializer Prototype Pollution vulnerability"}