{"action":"Upgrade svelecte to 3.16.3 or later.","affected":[{"fixed":"3.16.3","introduced":"0"}],"component":"svelecte","cve_ids":["CVE-2023-38687"],"ecosystem":"npm","epss":0.00522,"exploited":false,"fixed_versions":["3.16.3"],"ghsa_id":"GHSA-7h45-grc5-89wq","id":"tcs_01M5KFA3EYE1GZT5YJ26VJTNZR","modified_at":"2023-11-08T04:13:09.235509Z","published_at":"2023-08-14T21:14:08Z","references":["https://osv.dev/vulnerability/GHSA-7h45-grc5-89wq","https://github.com/mskocik/svelecte/security/advisories/GHSA-7h45-grc5-89wq","https://nvd.nist.gov/vuln/detail/CVE-2023-38687","https://github.com/mskocik/svelecte"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-7h45-grc5-89wq","url":"https://osv.dev/vulnerability/GHSA-7h45-grc5-89wq"}],"summary":"Svelecte item names vulnerable to execution of arbitrary JavaScript"}