{"action":"Upgrade highlight.run to 6.0.0 or later.","affected":[{"fixed":"6.0.0","introduced":"0"}],"component":"highlight.run","cve_ids":["CVE-2023-33187"],"ecosystem":"npm","epss":0.00285,"exploited":false,"fixed_versions":["6.0.0"],"ghsa_id":"GHSA-9qpj-qq2r-5mcc","id":"tcs_01M5KFGQM4F9D1BQNW13MMAF9R","modified_at":"2023-11-08T04:12:39.505858Z","published_at":"2023-05-26T13:52:19Z","references":["https://osv.dev/vulnerability/GHSA-9qpj-qq2r-5mcc","https://github.com/highlight/highlight/security/advisories/GHSA-9qpj-qq2r-5mcc","https://nvd.nist.gov/vuln/detail/CVE-2023-33187","https://github.com/rrweb-io/rrweb/pull/1184","https://github.com/highlight/highlight"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-9qpj-qq2r-5mcc","url":"https://osv.dev/vulnerability/GHSA-9qpj-qq2r-5mcc"}],"summary":"html inputs of type password recorded in plaintext when converted to text inputs"}