{"action":"Upgrade loofah to 2.2.3 or later.","affected":[{"fixed":"2.2.3","introduced":"0"}],"component":"loofah","cve_ids":["CVE-2018-16468"],"ecosystem":"RubyGems","epss":0.00916,"exploited":false,"fixed_versions":["2.2.3"],"ghsa_id":"GHSA-g4xq-jx4w-4cjv","id":"tcs_01M5KEK7RDFYZRD63K0KE7V46K","modified_at":"2023-11-08T03:59:59.636888Z","published_at":"2018-11-01T14:46:01Z","references":["https://osv.dev/vulnerability/GHSA-g4xq-jx4w-4cjv","https://nvd.nist.gov/vuln/detail/CVE-2018-16468","https://github.com/flavorjones/loofah/issues/154","https://github.com/flavorjones/loofah","https://www.debian.org/security/2019/dsa-4364"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-g4xq-jx4w-4cjv","url":"https://osv.dev/vulnerability/GHSA-g4xq-jx4w-4cjv"}],"summary":"Loofah Cross-site Scripting vulnerability"}