{"action":"Upgrade lettersanitizer to 1.0.2 or later.","affected":[{"fixed":"1.0.2","introduced":"0"}],"component":"lettersanitizer","cve_ids":["CVE-2022-31103"],"ecosystem":"npm","epss":0.0149,"exploited":false,"fixed_versions":["1.0.2"],"ghsa_id":"GHSA-7r3r-gq8p-v9jj","id":"tcs_01M5KFARZART1TC4DNX39BAYE6","modified_at":"2023-11-08T04:09:26.205914Z","published_at":"2022-06-23T17:48:19Z","references":["https://osv.dev/vulnerability/GHSA-7r3r-gq8p-v9jj","https://github.com/mat-sz/lettersanitizer/security/advisories/GHSA-7r3r-gq8p-v9jj","https://nvd.nist.gov/vuln/detail/CVE-2022-31103","https://github.com/mat-sz/react-letter/issues/17","https://github.com/mat-sz/lettersanitizer/commit/96d3dfe2ef0465d47324ed4d13e91ba0816a173f","https://github.com/mat-sz/lettersanitizer"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-7r3r-gq8p-v9jj","url":"https://osv.dev/vulnerability/GHSA-7r3r-gq8p-v9jj"}],"summary":"Improper handling of CSS at-rules in lettersanitizer"}