{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"4.0.11"}],"component":"jquery-file-upload","cve_ids":["CVE-2021-37504"],"ecosystem":"npm","epss":0.00867,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-43x9-7hfv-mxrf","id":"tcs_01M5KEZ23YT15C0Q13T3XECBR7","modified_at":"2024-04-02T20:56:42.825129Z","published_at":"2022-02-26T00:00:39Z","references":["https://osv.dev/vulnerability/GHSA-43x9-7hfv-mxrf","https://nvd.nist.gov/vuln/detail/CVE-2021-37504","https://github.com/hayageek/jquery-upload-file","https://github.com/hayageek/jquery-upload-file/blob/master/js/jquery.uploadfile.js#L469"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-43x9-7hfv-mxrf","url":"https://osv.dev/vulnerability/GHSA-43x9-7hfv-mxrf"}],"summary":"jQuery-Upload-File XSS in fileNameStr"}