{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"4.4.0","last_affected":"4.5.1"}],"component":"metro4","cve_ids":["CVE-2022-41376"],"ecosystem":"npm","epss":0.0057,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-633r-r4p8-pw3w","id":"tcs_01M5KF59JNE1YFM4DCC71PXDDR","modified_at":"2023-11-08T04:10:29.923939Z","published_at":"2022-10-11T19:00:26Z","references":["https://osv.dev/vulnerability/GHSA-633r-r4p8-pw3w","https://nvd.nist.gov/vuln/detail/CVE-2022-41376","https://alicangonullu.org/konu/138","https://github.com/olton/Metro-UI-CSS","https://youtu.be/_wzGVpX54Rc"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-633r-r4p8-pw3w","url":"https://osv.dev/vulnerability/GHSA-633r-r4p8-pw3w"}],"summary":"Cross site scripting in Metro UI"}