{"action":"Upgrade selectize-plugin-a11y to 1.1.0 or later.","affected":[{"fixed":"1.1.0","introduced":"0"}],"component":"selectize-plugin-a11y","cve_ids":["CVE-2019-15482"],"ecosystem":"npm","epss":0.00861,"exploited":false,"fixed_versions":["1.1.0"],"ghsa_id":"GHSA-8cpw-73f2-w58m","id":"tcs_01M5KFCMFQSVKAQ8VB2390HYF3","modified_at":"2023-11-08T04:01:13.250496Z","published_at":"2019-08-27T17:38:33Z","references":["https://osv.dev/vulnerability/GHSA-8cpw-73f2-w58m","https://nvd.nist.gov/vuln/detail/CVE-2019-15482","https://github.com/SLMNBJ/selectize-plugin-a11y/pull/9","https://www.npmjs.com/advisories/1145","https://www.npmjs.com/package/selectize-plugin-a11y/v/1.1.0"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-8cpw-73f2-w58m","url":"https://osv.dev/vulnerability/GHSA-8cpw-73f2-w58m"}],"summary":"Cross-Site Scripting in selectize-plugin-a11y"}