{"action":"Upgrade showdoc/showdoc to 2.10.4 or later.","affected":[{"fixed":"2.10.4","introduced":"0"}],"component":"showdoc/showdoc","cve_ids":["CVE-2022-0940"],"ecosystem":"Packagist","epss":0.00547,"exploited":false,"fixed_versions":["2.10.4"],"ghsa_id":"GHSA-82j4-vr25-x394","id":"tcs_01M5KEYJ6Y31QDFYS4N1RWZXDT","modified_at":"2023-11-08T04:07:43.060792Z","published_at":"2022-03-15T00:01:01Z","references":["https://osv.dev/vulnerability/GHSA-82j4-vr25-x394","https://nvd.nist.gov/vuln/detail/CVE-2022-0940","https://github.com/star7th/showdoc/commit/78522520892d4e29cc94148c6ec84a204a607b73","https://github.com/star7th/showdoc","https://huntr.dev/bounties/856bd2e2-db4f-4b7d-9927-222261ae3782"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-82j4-vr25-x394","url":"https://osv.dev/vulnerability/GHSA-82j4-vr25-x394"}],"summary":"Cross-site Scripting in ShowDoc"}