{"action":"Upgrade react-svg to 2.2.18 or later.","affected":[{"fixed":"2.2.18","introduced":"0"}],"component":"react-svg","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["2.2.18"],"ghsa_id":"GHSA-8xqr-4cpm-wx7g","id":"tcs_01M5KFEAYHF7DXWVW2C14JFY5D","modified_at":"2020-08-31T18:31:14Z","published_at":"2019-05-31T23:47:27Z","references":["https://osv.dev/vulnerability/GHSA-8xqr-4cpm-wx7g","https://github.com/tanem/react-svg/pull/57","https://github.com/tanem/react-svg/pull/57/commits/ec7de5d678f53a085cee1348cb1aa069c9fc42fb","https://www.npmjs.com/advisories/648"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-8xqr-4cpm-wx7g","url":"https://osv.dev/vulnerability/GHSA-8xqr-4cpm-wx7g"}],"summary":"Cross-Site Scripting in react-svg"}