{"action":"Upgrade tileserver-gl to 3.1.0 or later.","affected":[{"fixed":"3.1.0","introduced":"0"}],"component":"tileserver-gl","cve_ids":["CVE-2020-15500"],"ecosystem":"npm","epss":0.12224,"exploited":false,"fixed_versions":["3.1.0"],"ghsa_id":"GHSA-3fr8-mwpp-8h9p","id":"tcs_01M5KEX6RK7528N2A0J5FHTN5N","modified_at":"2023-11-08T04:02:37.114856Z","published_at":"2021-05-17T21:01:15Z","references":["https://osv.dev/vulnerability/GHSA-3fr8-mwpp-8h9p","https://nvd.nist.gov/vuln/detail/CVE-2020-15500","https://github.com/maptiler/tileserver-gl/issues/461","https://github.com/maptiler/tileserver-gl/commit/10431d70d0f0d7b7950ae2c02aea0850c7566621","https://github.com/maptiler/tileserver-gl","http://packetstormsecurity.com/files/162193/Tileserver-gl-3.0.0-Cross-Site-Scripting.html"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-3fr8-mwpp-8h9p","url":"https://osv.dev/vulnerability/GHSA-3fr8-mwpp-8h9p"}],"summary":"Cross-site scripting in TileServer GL"}