{"action":"Upgrade node-forge to 0.10.0 or later.","affected":[{"fixed":"0.10.0","introduced":"0"}],"component":"node-forge","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["0.10.0"],"ghsa_id":"GHSA-wxgw-qj99-44c2","id":"tcs_01M5KGGAK4HYEM458RHWTQHNK4","modified_at":"2022-01-07T22:20:50Z","published_at":"2022-01-08T00:22:40Z","references":["https://osv.dev/vulnerability/GHSA-wxgw-qj99-44c2","https://github.com/digitalbazaar/forge/security/advisories/GHSA-wxgw-qj99-44c2"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-wxgw-qj99-44c2","url":"https://osv.dev/vulnerability/GHSA-wxgw-qj99-44c2"}],"summary":"Prototype Pollution in node-forge util.setPath API"}