{"action":"Upgrade total.js to 3.3.0-13 or later.","affected":[{"fixed":"3.3.0-13","introduced":"0"}],"component":"total.js","cve_ids":["CVE-2019-10260"],"ecosystem":"npm","epss":0.00905,"exploited":false,"fixed_versions":["3.3.0-13"],"ghsa_id":"GHSA-72p5-2r6g-fm6v","id":"tcs_01M5KF8H61T4KN3KSPNDV48JQ9","modified_at":"2023-11-08T04:00:44.078360Z","published_at":"2019-04-02T15:46:52Z","references":["https://osv.dev/vulnerability/GHSA-72p5-2r6g-fm6v","https://nvd.nist.gov/vuln/detail/CVE-2019-10260","https://github.com/totaljs/cms/commit/75205f93009db3cf8c0b0f4f1fc8ab82d70da8ad","https://github.com/totaljs/cms/commit/8b9d7dada998c08d172481d9f0fc0397c4b3c78d","https://github.com/advisories/GHSA-72p5-2r6g-fm6v"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-72p5-2r6g-fm6v","url":"https://osv.dev/vulnerability/GHSA-72p5-2r6g-fm6v"}],"summary":"Moderate severity vulnerability that affects total.js"}