{"action":"Upgrade hellojs to 1.18.6 or later.","affected":[{"fixed":"1.18.6","introduced":"0"}],"component":"hellojs","cve_ids":["CVE-2020-7741"],"ecosystem":"npm","epss":0.01476,"exploited":false,"fixed_versions":["1.18.6"],"ghsa_id":"GHSA-7jh9-6cpf-h4m7","id":"tcs_01M5KFA9VPHFE33ER4EYFPAW9Y","modified_at":"2026-07-08T06:49:36.561801408Z","published_at":"2021-01-13T19:07:01Z","references":["https://osv.dev/vulnerability/GHSA-7jh9-6cpf-h4m7","https://nvd.nist.gov/vuln/detail/CVE-2020-7741","https://github.com/MrSwitch/hello.js/commit/d6f5137f30de6e0ef7048191ee6ae575fdc2f669","https://github.com/MrSwitch/hello.js/blob/3b79ec93781b3d7b9c0b56f598e060301d1f3e73/dist/hello.all.js%23L1545","https://snyk.io/vuln/SNYK-JS-HELLOJS-1014546"],"severity":{"label":"critical","score":9.9},"sources":[{"source":"osv","source_id":"GHSA-7jh9-6cpf-h4m7","url":"https://osv.dev/vulnerability/GHSA-7jh9-6cpf-h4m7"}],"summary":"XSS in hello.js"}