{"action":"Upgrade libnested to 1.5.2 or later.","affected":[{"fixed":"1.5.2","introduced":"0"}],"component":"libnested","cve_ids":["CVE-2022-25352"],"ecosystem":"npm","epss":0.02061,"exploited":false,"fixed_versions":["1.5.2"],"ghsa_id":"GHSA-x5m8-2r8v-8f97","id":"tcs_01M5KGH1KYFHHG97Q1QHQJTE2H","modified_at":"2026-07-08T06:50:03.804652388Z","published_at":"2022-03-18T00:01:11Z","references":["https://osv.dev/vulnerability/GHSA-x5m8-2r8v-8f97","https://nvd.nist.gov/vuln/detail/CVE-2022-25352","https://github.com/dominictarr/libnested/commit/c1129865d75fbe52b5a4f755ad3110ca5420f2e1","https://github.com/dominictarr/libnested","https://github.com/dominictarr/libnested/blob/master/index.js%23L22","https://snyk.io/vuln/SNYK-JS-LIBNESTED-2342117"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-x5m8-2r8v-8f97","url":"https://osv.dev/vulnerability/GHSA-x5m8-2r8v-8f97"}],"summary":"Prototype Pollution in libnested"}