{"action":"Upgrade org.webjars.npm:min-dash to 3.8.1 or later.","affected":[{"fixed":"3.8.1","introduced":"0"}],"component":"org.webjars.npm:min-dash","cve_ids":["CVE-2021-23460"],"ecosystem":"Maven","epss":0.0219,"exploited":false,"fixed_versions":["3.8.1"],"ghsa_id":"GHSA-2m53-83f3-562j","id":"tcs_01M5N86VZ86Z47MF82FN2CD6RR","modified_at":"2025-07-18T20:12:18.479182Z","published_at":"2022-02-01T00:44:35Z","references":["https://osv.dev/vulnerability/GHSA-2m53-83f3-562j","https://github.com/bpmn-io/min-dash/security/advisories/GHSA-2m53-83f3-562j","https://nvd.nist.gov/vuln/detail/CVE-2021-23460","https://github.com/bpmn-io/min-dash/pull/21","https://github.com/bpmn-io/min-dash/commit/2c6689e2aa29f4b66a4874a2f3003431e9db48d1","https://github.com/bpmn-io/min-dash","https://github.com/bpmn-io/min-dash/blob/c4d579c0eb2ed0739592111c3906b198921d3f52/lib/object.js#L32","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2342127","https://snyk.io/vuln/SNYK-JS-MINDASH-2340605"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-2m53-83f3-562j#Maven/org.webjars.npm:min-dash","url":"https://osv.dev/vulnerability/GHSA-2m53-83f3-562j"}],"summary":"Prototype pollution in min-dash"}