{"action":"Upgrade @strikeentco/set to 1.0.1 or later.","affected":[{"fixed":"1.0.1","introduced":"1.0.0"}],"component":"@strikeentco/set","cve_ids":["CVE-2020-28267"],"ecosystem":"npm","epss":0.02291,"exploited":false,"fixed_versions":["1.0.1"],"ghsa_id":"GHSA-wwg2-2crq-6grr","id":"tcs_01M5KGG76DT4CRBGMSHXVJTG4Q","modified_at":"2023-11-08T04:03:24.343552Z","published_at":"2022-05-24T17:34:03Z","references":["https://osv.dev/vulnerability/GHSA-wwg2-2crq-6grr","https://nvd.nist.gov/vuln/detail/CVE-2020-28267","https://github.com/strikeentco/set/commit/102cc6b2e1d1e0c928ced87e75df759d5541ff60","https://github.com/strikeentco/set","https://www.whitesourcesoftware.com/vulnerability-database/CVE-2020-28267"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-wwg2-2crq-6grr","url":"https://osv.dev/vulnerability/GHSA-wwg2-2crq-6grr"}],"summary":"Prototype pollution in @strikeentco/set"}