{"action":"Upgrade epubjs to 0.3.89 or later.","affected":[{"fixed":"0.3.89","introduced":"0"}],"component":"epubjs","cve_ids":["CVE-2021-33040"],"ecosystem":"npm","epss":0.00937,"exploited":false,"fixed_versions":["0.3.89"],"ghsa_id":"GHSA-c6rp-xvqv-mwmf","id":"tcs_01M5KFHZ9FST1T0EW27V8G2SNM","modified_at":"2023-11-08T04:06:03.210708Z","published_at":"2022-01-21T23:52:17Z","references":["https://osv.dev/vulnerability/GHSA-c6rp-xvqv-mwmf","https://nvd.nist.gov/vuln/detail/CVE-2021-33040","https://github.com/futurepress/epub.js/commit/ab4dd46408cce0324e1c67de4a3ba96b59e5012e","https://github.com/futurepress/epub.js","https://github.com/futurepress/epub.js/blob/5c7f21d648d9d20d44c6c365d164b16871847023/src/managers/views/iframe.js#L373","https://github.com/futurepress/epub.js/compare/v0.3.88...v0.3.89"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-c6rp-xvqv-mwmf","url":"https://osv.dev/vulnerability/GHSA-c6rp-xvqv-mwmf"}],"summary":"Cross-site Scripting in epubjs"}