{
  "@id": "urn:uuid:b19a9631-7362-4662-8bc8-fbff2e8adf5b",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 2,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-03T13:57:09.327261+00:00",
  "statements": [
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/%40sentry/browser@10.53.1",
          "identifiers": {
            "purl": "pkg:npm/%40sentry/browser@10.53.1"
          }
        }
      ],
      "timestamp": "2026-11-03T13:57:09.327261+00:00",
      "status_notes": "Vulnerability GHSA-593m-55hh-j8gv does not affect version 10.53.1 of @sentry/browser. not_affected \u2014 The target repository (Sentry JavaScript SDK version 10.53.1) is not affected by GHSA-593m-55hh-j8gv (Prototype Pollution gadget vulnerability). The vulnerable code pattern was fixed by upstream Sentry in version 8.33.0 (October 2024) via commit 35bdc87dee, and the target version 10.53.1 includes this upstream fix. The fix adds a type check to ensure __sentry_wrapped__ is a function before usin...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "GHSA-593m-55hh-j8gv"
      },
      "impact_statement": "not_affected \u2014 The target repository (Sentry JavaScript SDK version 10.53.1) is not affected by GHSA-593m-55hh-j8gv (Prototype Pollution gadget vulnerability). The vulnerable code pattern was fixed by upstream Sentry in version 8.33.0 (October 2024) via commit 35bdc87dee, and the target version 10.53.1 includes this upstream fix. The fix adds a type check to ensure __sentry_wrapped__ is a function before usin..."
    }
  ]
}