{"action":"Upgrade mathjax to 2.7.4 or later.","affected":[{"fixed":"2.7.4","introduced":"0"}],"component":"mathjax","cve_ids":["CVE-2018-1999024"],"ecosystem":"npm","epss":0.01448,"exploited":false,"fixed_versions":["2.7.4"],"ghsa_id":"GHSA-3c48-6pcv-88rm","id":"tcs_01M5KEWXTGVWJPHT6HQ5TTBT31","modified_at":"2023-11-08T04:00:09.670565Z","published_at":"2018-07-27T17:05:27Z","references":["https://osv.dev/vulnerability/GHSA-3c48-6pcv-88rm","https://nvd.nist.gov/vuln/detail/CVE-2018-1999024","https://github.com/mathjax/MathJax/commit/a55da396c18cafb767a26aa9ad96f6f4199852f1","https://blog.bentkowski.info/2018/06/xss-in-google-colaboratory-csp-bypass.html","https://github.com/advisories/GHSA-3c48-6pcv-88rm","https://github.com/mathjax/MathJax"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-3c48-6pcv-88rm","url":"https://osv.dev/vulnerability/GHSA-3c48-6pcv-88rm"}],"summary":"Macro in MathJax running untrusted Javascript within a web browser"}