{"url":"http://public2.vulnerablecode.io/api/packages/457943?format=json","purl":"pkg:npm/class-transformer@0.1.0-beta.3","type":"npm","namespace":"","name":"class-transformer","version":"0.1.0-beta.3","qualifiers":{},"subpath":"","is_vulnerable":true,"next_non_vulnerable_version":"0.3.1","latest_non_vulnerable_version":"0.3.1","affected_by_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/204643?format=json","vulnerability_id":"VCID-7yt9-ym56-jkg9","summary":"Prototype pollution in class-transformer","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2020-7637","reference_id":"","reference_type":"","scores":[{"value":"0.00318","scoring_system":"epss","scoring_elements":"0.5539","published_at":"2026-06-12T12:55:00Z"},{"value":"0.00318","scoring_system":"epss","scoring_elements":"0.55268","published_at":"2026-06-11T12:55:00Z"},{"value":"0.00318","scoring_system":"epss","scoring_elements":"0.55393","published_at":"2026-06-14T12:55:00Z"},{"value":"0.00318","scoring_system":"epss","scoring_elements":"0.55406","published_at":"2026-06-13T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2020-7637"},{"reference_url":"https://github.com/typestack/class-transformer","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/typestack/class-transformer"},{"reference_url":"https://github.com/typestack/class-transformer/blob/a650d9f490573443f62508bc063b857bcd5e2525/src/ClassTransformer.ts#L29-L31,","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/typestack/class-transformer/blob/a650d9f490573443f62508bc063b857bcd5e2525/src/ClassTransformer.ts#L29-L31,"},{"reference_url":"https://github.com/typestack/class-transformer/commit/8f04eb9db02de708f1a20f6f2d2bb309b2fed01e","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/typestack/class-transformer/commit/8f04eb9db02de708f1a20f6f2d2bb309b2fed01e"},{"reference_url":"https://snyk.io/vuln/SNYK-JS-CLASSTRANSFORMER-564431","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://snyk.io/vuln/SNYK-JS-CLASSTRANSFORMER-564431"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7637","reference_id":"CVE-2020-7637","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7637"},{"reference_url":"https://github.com/advisories/GHSA-6gp3-h3jj-prx4","reference_id":"GHSA-6gp3-h3jj-prx4","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-6gp3-h3jj-prx4"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/16335?format=json","purl":"pkg:npm/class-transformer@0.3.1","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/class-transformer@0.3.1"}],"aliases":["CVE-2020-7637","GHSA-6gp3-h3jj-prx4"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-7yt9-ym56-jkg9"}],"fixing_vulnerabilities":[],"risk_score":"3.1","resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/class-transformer@0.1.0-beta.3"}