{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.4.27"}],"component":"joyqi/hyper-down","cve_ids":["CVE-2022-25849"],"ecosystem":"Packagist","epss":0.0057,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-4r9g-w48q-8jwm","id":"tcs_01M5KEV8EX6K2P79NK8BZC0E51","modified_at":"2023-11-08T04:08:49.074270Z","published_at":"2022-10-26T12:00:29Z","references":["https://osv.dev/vulnerability/GHSA-4r9g-w48q-8jwm","https://nvd.nist.gov/vuln/detail/CVE-2022-25849","https://github.com/SegmentFault/HyperDown","https://security.snyk.io/vuln/SNYK-PHP-JOYQIHYPERDOWN-2953544"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-4r9g-w48q-8jwm","url":"https://osv.dev/vulnerability/GHSA-4r9g-w48q-8jwm"}],"summary":"HyperDown vulnerable to Cross-site Scripting"}