[{"CVE":"CVE-2020-7598","severity":"moderate","public_date":"2020-03-10T00:00:00Z","advisories":["RHSA-2020:2895","RHSA-2020:3247","RHSA-2020:2852","RHSA-2020:2992","RHSA-2020:2362","RHSA-2020:2848","RHSA-2020:3042","RHSA-2020:2849","RHSA-2020:2847","RHSA-2020:3084"],"bugzilla":"1813344","bugzilla_description":"CVE-2020-7598 nodejs-minimist: prototype pollution allows adding or modifying properties of Object.prototype using a constructor or __proto__ payload","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["nodejs:12-8020020200630155331.4cda2c84","nodejs:10-8000020200617115915.f8e95b4e","kiali-0:v1.0.11.redhat1-1.el7","rh-nodejs12-nodejs-0:12.18.2-1.el7","servicemesh-grafana-0:6.2.2-36.el8","rh-nodejs10-nodejs-0:10.21.0-3.el7","nodejs:12-8010020200630154708.c27ad7f8","nodejs:10-8020020200617141353.4cda2c84","nodejs:10-8010020200617134056.c27ad7f8","ovirt-engine-ui-extensions-0:1.2.2-1.el8ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7598.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2019-10747","severity":"moderate","public_date":"2019-06-20T00:00:00Z","advisories":[],"bugzilla":"1795479","bugzilla_description":"CVE-2019-10747 nodejs-set-value: prototype pollution in function set-value","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-471","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10747.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2019-10746","severity":"important","public_date":"2019-06-19T00:00:00Z","advisories":[],"bugzilla":"1795475","bugzilla_description":"CVE-2019-10746 nodejs-mixin-deep: prototype pollution in function mixin-deep","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-471","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10746.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-3750","severity":"low","public_date":"2018-04-18T00:00:00Z","advisories":["RHSA-2020:2625"],"bugzilla":"1578246","bugzilla_description":"CVE-2018-3750 nodejs-deep-extend: Prototype pollution can allow attackers to modify object properties","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-nodejs8-nodejs-0:8.17.0-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3750.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.2"}]