{"action":"Upgrade marked to 0.3.7 or later.","affected":[{"fixed":"0.3.7","introduced":"0"}],"component":"marked","cve_ids":["CVE-2017-1000427"],"ecosystem":"npm","epss":0.01512,"exploited":false,"fixed_versions":["0.3.7"],"ghsa_id":"GHSA-7px7-7xjx-hxm8","id":"tcs_01M5KFAKW6B7YWF30P3KJWXJN0","modified_at":"2023-11-08T03:58:46.365782Z","published_at":"2018-01-04T21:04:19Z","references":["https://osv.dev/vulnerability/GHSA-7px7-7xjx-hxm8","https://nvd.nist.gov/vuln/detail/CVE-2017-1000427","https://github.com/advisories/GHSA-7px7-7xjx-hxm8","https://github.com/markedjs/marked","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BO2RMVVZVV6NFTU46B5RYRK7ZCXYARZS","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M6BJG6RGDH7ZWVVAUFBFI5L32RSMQN2S","https://snyk.io/vuln/npm:marked:20170112"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-7px7-7xjx-hxm8","url":"https://osv.dev/vulnerability/GHSA-7px7-7xjx-hxm8"}],"summary":"Marked vulnerable to XSS from data URIs"}