{"action":"Upgrade vxe-table to 3.7.10 or later.","affected":[{"fixed":"3.7.10","introduced":"0"}],"component":"vxe-table","cve_ids":["CVE-2023-1001"],"ecosystem":"npm","epss":0.00345,"exploited":false,"fixed_versions":["3.7.10"],"ghsa_id":"GHSA-2qjp-fg8c-g878","id":"tcs_01M5KETWEDR0B4NVYS3KGDWSQE","modified_at":"2024-05-24T15:12:03.601523Z","published_at":"2024-05-24T14:45:19Z","references":["https://osv.dev/vulnerability/GHSA-2qjp-fg8c-g878","https://nvd.nist.gov/vuln/detail/CVE-2023-1001","https://github.com/x-extends/vxe-table/commit/d70b0e089740b65a22c89c106ebc4627ac48a22d","https://gitee.com/xuliangzhan_admin/vxe-table/commit/d70b0e089740b65a22c89c106ebc4627ac48a22d","https://gitee.com/xuliangzhan_admin/vxe-table/issues/I8O21R","https://gitee.com/xuliangzhan_admin/vxe-table/tree/3.7.10","https://github.com/x-extends/vxe-table","https://vuldb.com/?ctiid.266123","https://vuldb.com/?id.266123"],"severity":{"label":"low","score":3.5},"sources":[{"source":"osv","source_id":"GHSA-2qjp-fg8c-g878","url":"https://osv.dev/vulnerability/GHSA-2qjp-fg8c-g878"}],"summary":"vxe-table Cross-site Scripting vulnerability"}