{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"8.3.4"}],"component":"tsup","cve_ids":["CVE-2024-53384"],"ecosystem":"npm","epss":0.00245,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-3mv9-4h5g-vhg3","id":"tcs_01M5KEXSR4RH021DZW2G3XMXFT","modified_at":"2025-03-03T22:42:09.821777Z","published_at":"2025-03-03T18:31:29Z","references":["https://osv.dev/vulnerability/GHSA-3mv9-4h5g-vhg3","https://nvd.nist.gov/vuln/detail/CVE-2024-53384","https://gist.github.com/jackfromeast/36f98bf7542d11835c883c1d175d9b92","https://github.com/egoist/tsup"],"severity":{"label":"medium","score":5.1},"sources":[{"source":"osv","source_id":"GHSA-3mv9-4h5g-vhg3","url":"https://osv.dev/vulnerability/GHSA-3mv9-4h5g-vhg3"},{"source":"nvd","source_id":"CVE-2024-53384","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-53384"}],"summary":"tsup DOM Clobbering vulnerability"}