{"action":"Upgrade @berslucas/liljs to 1.0.2 or later.","affected":[{"fixed":"1.0.2","introduced":"0"}],"component":"@berslucas/liljs","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["1.0.2"],"ghsa_id":"GHSA-c53x-wwx2-pg96","id":"tcs_01M5KFHSD0PS1S14YE4D9W7PDS","modified_at":"2021-09-28T17:27:43Z","published_at":"2020-09-03T17:03:58Z","references":["https://osv.dev/vulnerability/GHSA-c53x-wwx2-pg96","https://github.com/bersLucas/liljs/pull/7","https://github.com/bersLucas/liljs/commit/779c0dcd8aba434a1c94db7d1d2d990a629f9a6c","https://github.com/bersLucas/liljs","https://github.com/bersLucas/liljs/releases/tag/1.0.2","https://snyk.io/vuln/SNYK-JS-BERSLUCASLILJS-450217","https://www.npmjs.com/advisories/1016"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-c53x-wwx2-pg96","url":"https://osv.dev/vulnerability/GHSA-c53x-wwx2-pg96"}],"summary":"Cross-Site Scripting in @berslucas/liljs"}