{"action":"Upgrade jquery-ujs to 1.0.4 or later.","affected":[{"fixed":"1.0.4","introduced":"0"}],"component":"jquery-ujs","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["1.0.4"],"ghsa_id":"GHSA-6qqj-rx4w-r3cj","id":"tcs_01M5KF7RYAH6JQYMRTZ0CK0VBV","modified_at":"2021-09-23T19:45:13Z","published_at":"2020-08-31T22:48:44Z","references":["https://osv.dev/vulnerability/GHSA-6qqj-rx4w-r3cj","https://hackerone.com/reports/49935","https://groups.google.com/forum/#!msg/rubyonrails-security/XIZPbobuwaY/fqnzzpuOlA4J","https://snyk.io/vuln/npm:jquery-ujs:20150624","https://www.npmjs.com/advisories/15"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-6qqj-rx4w-r3cj","url":"https://osv.dev/vulnerability/GHSA-6qqj-rx4w-r3cj"}],"summary":"CSRF Vulnerability in jquery-ujs"}