{"action":"Upgrade joplin to 2.11.5 or later.","affected":[{"fixed":"2.11.5","introduced":"0"}],"component":"joplin","cve_ids":["CVE-2023-37298"],"ecosystem":"npm","epss":0.00574,"exploited":false,"fixed_versions":["2.11.5"],"ghsa_id":"GHSA-7grw-xfx6-qhx6","id":"tcs_01M5KFA25J7VMBXKZGV7NK70ES","modified_at":"2023-11-08T04:13:01.098691Z","published_at":"2023-06-30T15:30:22Z","references":["https://osv.dev/vulnerability/GHSA-7grw-xfx6-qhx6","https://nvd.nist.gov/vuln/detail/CVE-2023-37298","https://github.com/laurent22/joplin/commit/caf66068bfc474bbfd505013076ed173cd90ca83","https://github.com/laurent22/joplin","https://github.com/laurent22/joplin/releases/tag/v2.11.5","https://vuln.ryotak.net/advisories/69"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-7grw-xfx6-qhx6","url":"https://osv.dev/vulnerability/GHSA-7grw-xfx6-qhx6"}],"summary":"Joplin Cross-site Scripting vulnerability"}