{"action":"Upgrade discord-markdown to 2.3.1 or later.","affected":[{"fixed":"2.3.1","introduced":"0"}],"component":"discord-markdown","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["2.3.1"],"ghsa_id":"GHSA-9r27-994c-4xch","id":"tcs_01M5KFGRVKGV4RK704Y7Z811RZ","modified_at":"2020-02-21T20:20:53Z","published_at":"2020-02-24T17:34:02Z","references":["https://osv.dev/vulnerability/GHSA-9r27-994c-4xch","https://github.com/brussell98/discord-markdown/security/advisories/GHSA-9r27-994c-4xch","https://github.com/brussell98/discord-markdown/issues/13","https://github.com/brussell98/discord-markdown/commit/7ce2eb66520815dcf5e97ef2bc8a2d5979da66e7"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-9r27-994c-4xch","url":"https://osv.dev/vulnerability/GHSA-9r27-994c-4xch"}],"summary":"discord-html not escaping HTML code blocks when lacking a language identifier"}