{"action":"Upgrade dompurify to 1.0.11 or later.","affected":[{"fixed":"1.0.11","introduced":"0"}],"component":"dompurify","cve_ids":["CVE-2019-25155"],"ecosystem":"npm","epss":0.00508,"exploited":false,"fixed_versions":["1.0.11"],"ghsa_id":"GHSA-8hgg-xxm5-3873","id":"tcs_01M5KFD3A7GDGRKK5RF0EX1TPP","modified_at":"2023-11-15T20:41:41.228602Z","published_at":"2023-11-14T21:30:51Z","references":["https://osv.dev/vulnerability/GHSA-8hgg-xxm5-3873","https://nvd.nist.gov/vuln/detail/CVE-2019-25155","https://github.com/cure53/DOMPurify/pull/337","https://github.com/cure53/DOMPurify/commit/7601c33a57e029cce51d910eda5179a3f1b51c83","https://github.com/cure53/DOMPurify","https://github.com/cure53/DOMPurify/compare/1.0.10...1.0.11"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-8hgg-xxm5-3873","url":"https://osv.dev/vulnerability/GHSA-8hgg-xxm5-3873"}],"summary":"DOMPurify Open Redirect vulnerability"}