{"action":"Upgrade @grafana/data to 8.2.3 or later.","affected":[{"fixed":"8.2.3","introduced":"8.0.0"}],"component":"@grafana/data","cve_ids":["CVE-2021-41174"],"ecosystem":"npm","epss":0.85404,"exploited":false,"fixed_versions":["8.2.3"],"ghsa_id":"GHSA-3j9m-hcv9-rpj8","id":"tcs_01M5KEXJFPH4HCHG1ZTG4TBRC8","modified_at":"2026-07-08T06:29:58.986490175Z","published_at":"2021-11-08T18:13:19Z","references":["https://osv.dev/vulnerability/GHSA-3j9m-hcv9-rpj8","https://github.com/grafana/grafana/security/advisories/GHSA-3j9m-hcv9-rpj8","https://nvd.nist.gov/vuln/detail/CVE-2021-41174","https://github.com/grafana/grafana/commit/31b78d51c693d828720a5b285107a50e6024c912","https://github.com/grafana/grafana/commit/3cb5214fa45eb5a571fd70d6c6edf0d729983f82","https://github.com/grafana/grafana/commit/fb85ed691290d211a5baa44d9a641ab137f0de88","https://github.com/grafana/grafana","https://security.netapp.com/advisory/ntap-20211125-0003"],"severity":{"label":"medium","score":6.9},"sources":[{"source":"osv","source_id":"GHSA-3j9m-hcv9-rpj8","url":"https://osv.dev/vulnerability/GHSA-3j9m-hcv9-rpj8"}],"summary":"XSS vulnerability allowing arbitrary JavaScript execution"}