{"action":"Upgrade glance to 3.0.8 or later.","affected":[{"fixed":"3.0.8","introduced":"0"}],"component":"glance","cve_ids":["CVE-2018-3748"],"ecosystem":"npm","epss":0.0093,"exploited":false,"fixed_versions":["3.0.8"],"ghsa_id":"GHSA-7375-vjr2-3g7w","id":"tcs_01M5KF8KBH2BPJA2MPJHQGHC3X","modified_at":"2023-11-08T04:00:18.718758Z","published_at":"2018-09-27T11:37:19Z","references":["https://osv.dev/vulnerability/GHSA-7375-vjr2-3g7w","https://nvd.nist.gov/vuln/detail/CVE-2018-3748","https://github.com/jarofghosts/glance/commit/cdc68bb68d785343ddb829f1adc130cdd6169533","https://hackerone.com/reports/310133","https://github.com/advisories/GHSA-7375-vjr2-3g7w","https://github.com/jarofghosts/glance","https://www.npmjs.com/advisories/610"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-7375-vjr2-3g7w","url":"https://osv.dev/vulnerability/GHSA-7375-vjr2-3g7w"}],"summary":"Cross-Site Scripting in glance"}