{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"grapesjs","cve_ids":["CVE-2022-21802"],"ecosystem":"npm","epss":0.00796,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-589f-c66p-hxr4","id":"tcs_01M5KF324NX85BP9VF96C7DNZ5","modified_at":"2023-11-08T04:08:10.634255Z","published_at":"2022-07-26T00:01:08Z","references":["https://osv.dev/vulnerability/GHSA-589f-c66p-hxr4","https://nvd.nist.gov/vuln/detail/CVE-2022-21802","https://github.com/artf/grapesjs/issues/4411%23issuecomment-1167202709","https://github.com/artf/grapesjs/commit/13e85d152d486b968265c4b8017e8901e7d89ff3","https://github.com/artf/grapesjs","https://github.com/artf/grapesjs/releases/tag/v0.19.5","https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2936781","https://security.snyk.io/vuln/SNYK-JS-GRAPESJS-2935960"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-589f-c66p-hxr4","url":"https://osv.dev/vulnerability/GHSA-589f-c66p-hxr4"}],"summary":"grapesjs before 0.19.5 vulnerable to Cross-site Scripting"}