{"action":"Upgrade vant to 2.1.8 or later.","affected":[{"fixed":"2.1.8","introduced":"0"}],"component":"vant","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["2.1.8"],"ghsa_id":"GHSA-9xr8-8hmc-389f","id":"tcs_01M5KFHBDCDXFT5J85PBXPNJXY","modified_at":"2021-08-18T22:47:15Z","published_at":"2019-11-22T13:45:33Z","references":["https://osv.dev/vulnerability/GHSA-9xr8-8hmc-389f","https://github.com/youzan/vant/issues/4270","https://github.com/youzan/vant/pull/4278/commits/d777b78c7dc2c904f474d057ea88449cfe2ca13a","https://snyk.io/vuln/SNYK-JS-VANT-460461","https://www.npmjs.com/advisories/1157"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-9xr8-8hmc-389f","url":"https://osv.dev/vulnerability/GHSA-9xr8-8hmc-389f"}],"summary":"Cross-Site Scripting in vant"}