{"action":"Upgrade snipe/snipe-it to 5.4.0 or later.","affected":[{"fixed":"5.4.0","introduced":"0"}],"component":"snipe/snipe-it","cve_ids":["CVE-2021-3938"],"ecosystem":"Packagist","epss":0.00538,"exploited":false,"fixed_versions":["5.4.0"],"ghsa_id":"GHSA-2cqg-q7jm-j35c","id":"tcs_01M5KERVBK2XC4GQKPMY9677QB","modified_at":"2024-02-16T08:07:55.660613Z","published_at":"2021-11-15T23:19:42Z","references":["https://osv.dev/vulnerability/GHSA-2cqg-q7jm-j35c","https://nvd.nist.gov/vuln/detail/CVE-2021-3938","https://github.com/snipe/snipe-it/commit/9ed1442bd124710f4178992cc4eca5236c7396b9","https://github.com/snipe/snipe-it","https://huntr.dev/bounties/198a0d67-9189-4170-809b-0f8aea43b063"],"severity":{"label":"low","score":3.9},"sources":[{"source":"osv","source_id":"GHSA-2cqg-q7jm-j35c","url":"https://osv.dev/vulnerability/GHSA-2cqg-q7jm-j35c"}],"summary":"snipe-it is vulnerable to Cross-site Scripting"}