{"action":"Upgrade chartkick to 3.2.0 or later.","affected":[{"fixed":"3.2.0","introduced":"0"}],"component":"chartkick","cve_ids":["CVE-2019-12732"],"ecosystem":"RubyGems","epss":0.00772,"exploited":false,"fixed_versions":["3.2.0"],"ghsa_id":"GHSA-g45g-g52h-39rg","id":"tcs_01M5KEK7EFN9PSRB175NZ98E9G","modified_at":"2023-11-08T04:01:06.006878Z","published_at":"2019-06-07T20:56:42Z","references":["https://osv.dev/vulnerability/GHSA-g45g-g52h-39rg","https://nvd.nist.gov/vuln/detail/CVE-2019-12732","https://github.com/ankane/chartkick/issues/488","https://github.com/ankane/chartkick","https://github.com/ankane/chartkick/blob/master/CHANGELOG.md"],"severity":{"label":"medium","score":4.7},"sources":[{"source":"osv","source_id":"GHSA-g45g-g52h-39rg","url":"https://osv.dev/vulnerability/GHSA-g45g-g52h-39rg"}],"summary":"Cross-site Scripting in Chartkick"}