{"action":"Upgrade @shopify/hydrogen to 0.19.0 or later.","affected":[{"fixed":"0.19.0","introduced":"0.10.0"}],"component":"@shopify/hydrogen","cve_ids":["CVE-2022-29230"],"ecosystem":"npm","epss":0.00832,"exploited":false,"fixed_versions":["0.19.0"],"ghsa_id":"GHSA-6j22-wv8g-894f","id":"tcs_01M5KF7928HXP83BB680N5QA4K","modified_at":"2023-11-08T04:09:11.671970Z","published_at":"2022-05-19T20:29:04Z","references":["https://osv.dev/vulnerability/GHSA-6j22-wv8g-894f","https://github.com/Shopify/hydrogen/security/advisories/GHSA-6j22-wv8g-894f","https://nvd.nist.gov/vuln/detail/CVE-2022-29230","https://github.com/Shopify/hydrogen/pull/1272","https://github.com/Shopify/hydrogen","https://github.com/Shopify/hydrogen/releases/tag/%40shopify/hydrogen%400.19.0"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-6j22-wv8g-894f","url":"https://osv.dev/vulnerability/GHSA-6j22-wv8g-894f"}],"summary":"Potential Cross-site Scripting vulnerability in Hydrogen"}