{"action":"Upgrade baobab to 2.6.1 or later.","affected":[{"fixed":"2.6.1","introduced":"0"}],"component":"baobab","cve_ids":["CVE-2021-4307"],"ecosystem":"npm","epss":0.01307,"exploited":false,"fixed_versions":["2.6.1"],"ghsa_id":"GHSA-wvr2-q86m-6whp","id":"tcs_01M5KGG36FANXRG8FWPAM4F7AY","modified_at":"2023-11-08T04:07:08.546865Z","published_at":"2023-01-07T21:30:38Z","references":["https://osv.dev/vulnerability/GHSA-wvr2-q86m-6whp","https://nvd.nist.gov/vuln/detail/CVE-2021-4307","https://github.com/Yomguithereal/baobab/pull/511","https://github.com/Yomguithereal/baobab/commit/c56639532a923d9a1600fb863ec7551b188b5d19","https://github.com/Yomguithereal/baobab","https://github.com/Yomguithereal/baobab/releases/tag/2.6.1","https://vuldb.com/?ctiid.217627","https://vuldb.com/?id.217627"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-wvr2-q86m-6whp","url":"https://osv.dev/vulnerability/GHSA-wvr2-q86m-6whp"}],"summary":"Baobab vulnerable to Prototype Pollution"}