{"action":"Upgrade trix to 1.3.3 or later.","affected":[{"fixed":"2.1.9","introduced":"2.0.0"},{"fixed":"1.3.3","introduced":"1.0.0"}],"component":"trix","cve_ids":["CVE-2024-53847"],"ecosystem":"npm","epss":0.00463,"exploited":false,"fixed_versions":["2.1.9","1.3.3"],"ghsa_id":"GHSA-6vx4-v2jw-qwqh","id":"tcs_01M5KF82XZCD8WJK48FRJB413V","modified_at":"2024-12-09T21:53:54Z","published_at":"2024-12-09T20:38:42Z","references":["https://osv.dev/vulnerability/GHSA-6vx4-v2jw-qwqh","https://github.com/basecamp/trix/security/advisories/GHSA-6vx4-v2jw-qwqh","https://nvd.nist.gov/vuln/detail/CVE-2024-53847","https://github.com/basecamp/trix/commit/272c7e27e722608732a67108ad3fe7870e233ac8","https://github.com/basecamp/trix"],"severity":{"label":"medium","score":5.1},"sources":[{"source":"osv","source_id":"GHSA-6vx4-v2jw-qwqh","url":"https://osv.dev/vulnerability/GHSA-6vx4-v2jw-qwqh"},{"source":"nvd","source_id":"CVE-2024-53847","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-53847"}],"summary":"Trix editor subject to XSS vulnerabilities on copy & paste"}