{"action":"Upgrade jupyterlite-core to 0.4.1 or later.","affected":[{"fixed":"0.4.1","introduced":"0"}],"component":"jupyterlite-core","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["0.4.1"],"ghsa_id":"GHSA-gj55-2xf9-67rq","id":"tcs_01M5KFHS1NV1HN4V0VGQ0XBQVN","modified_at":"2024-11-28T05:39:07.411996Z","published_at":"2024-09-06T19:51:19Z","references":["https://osv.dev/vulnerability/GHSA-gj55-2xf9-67rq","https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-9q39-rmj3-p4r2","https://github.com/jupyterlite/jupyterlite/security/advisories/GHSA-gj55-2xf9-67rq","https://github.com/jupyterlite/jupyterlite"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-gj55-2xf9-67rq","url":"https://osv.dev/vulnerability/GHSA-gj55-2xf9-67rq"}],"summary":"HTML injection in JupyterLite leading to DOM Clobbering"}