{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"4.3.1"}],"component":"react-bootstrap-table","cve_ids":["CVE-2021-23398"],"ecosystem":"npm","epss":0.01341,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-2589-w6xf-983r","id":"tcs_01M5KES0G4HXB15PW8HZ3T233G","modified_at":"2023-11-08T04:05:07.329507Z","published_at":"2021-12-10T18:58:49Z","references":["https://osv.dev/vulnerability/GHSA-2589-w6xf-983r","https://nvd.nist.gov/vuln/detail/CVE-2021-23398","https://github.com/AllenFang/react-bootstrap-table/issues/2071","https://github.com/AllenFang/react-bootstrap-table/blob/26d07defab759e4f9bce22d1d568690830b8d9d7/src/TableBody.js%23L114-L118","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1314286","https://snyk.io/vuln/SNYK-JS-REACTBOOTSTRAPTABLE-1314285"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-2589-w6xf-983r","url":"https://osv.dev/vulnerability/GHSA-2589-w6xf-983r"}],"summary":"Cross-site scripting in react-bootstrap-table"}