{"action":"Upgrade markdown-to-jsx to 7.4.0 or later.","affected":[{"fixed":"7.4.0","introduced":"0"}],"component":"markdown-to-jsx","cve_ids":["CVE-2024-21535"],"ecosystem":"npm","epss":0.00518,"exploited":false,"fixed_versions":["7.4.0"],"ghsa_id":"GHSA-4wx3-54gh-9fr9","id":"tcs_01M5KF1TJAP0D7D3YXJY128QS0","modified_at":"2024-10-15T18:12:20.318536Z","published_at":"2024-10-15T06:30:31Z","references":["https://osv.dev/vulnerability/GHSA-4wx3-54gh-9fr9","https://nvd.nist.gov/vuln/detail/CVE-2024-21535","https://github.com/quantizor/markdown-to-jsx/commit/8eb74da825c0d8d2e9508d73c672bcae36ba555a","https://github.com/quantizor/markdown-to-jsx","https://security.snyk.io/vuln/SNYK-JS-MARKDOWNTOJSX-6258886"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-4wx3-54gh-9fr9","url":"https://osv.dev/vulnerability/GHSA-4wx3-54gh-9fr9"}],"summary":"Cross site scripting in markdown-to-jsx"}