{"action":"Upgrade swagger-ui to 3.20.9 or later.","affected":[{"fixed":"3.20.9","introduced":"0"}],"component":"swagger-ui","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["3.20.9"],"ghsa_id":"GHSA-4f9m-pxwh-68hg","id":"tcs_01M5KF06D2A1Z1SX3QQS73WCGF","modified_at":"2021-09-28T16:57:07Z","published_at":"2020-09-11T21:20:14Z","references":["https://osv.dev/vulnerability/GHSA-4f9m-pxwh-68hg","https://github.com/swagger-api/swagger-ui/pull/5190","https://github.com/swagger-api/swagger-ui/commit/1e184e8e218676278c83e60a45846c199ce3d15e","https://github.com/swagger-api/swagger-ui","https://snyk.io/vuln/SNYK-JS-SWAGGERUI-449921"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-4f9m-pxwh-68hg","url":"https://osv.dev/vulnerability/GHSA-4f9m-pxwh-68hg"}],"summary":"Cross-Site Scripting in swagger-ui"}