{"ghsa": "GHSA-qcm7-3vpr-hj5h", "repo": "adonisjs/bodyparser", "cwes": ["CWE-1321", "CWE-94"], "summary": "fix: prevent prototype pollution via multipart field names", "fix_commit": "40e1c71f958cffb74f6b91bed6630dca979062ed", "parent_commit": "3017053886993908d181fd721ea1b7f66e91f470", "vuln_files": ["src/form_fields.ts"], "vuln_lines": {"src/form_fields.ts": [20]}, "source_files": 17, "scope_dirs": ["src"], "source_note": "Subset: only the src/ package (containing the vuln file) was copied into source/, not the full repo."}