{"action":"Upgrade gmail-js to 0.6.5 or later.","affected":[{"fixed":"0.6.5","introduced":"0"}],"component":"gmail-js","cve_ids":["CVE-2016-1000228"],"ecosystem":"npm","exploited":false,"fixed_versions":["0.6.5"],"ghsa_id":"GHSA-c7pp-g2v2-2766","id":"tcs_01M5KFJ3RKPP9TD0R20X58BXJ6","modified_at":"2023-11-08T03:58:07.661328Z","published_at":"2020-09-01T15:32:04Z","references":["https://osv.dev/vulnerability/GHSA-c7pp-g2v2-2766","https://nvd.nist.gov/vuln/detail/CVE-2016-1000228","https://github.com/KartikTalwar/gmail.js/issues/281","https://github.com/KartikTalwar/gmail.js/commit/a83436f499f9c01b04280af945a5a81137b6baf1","https://github.com/KartikTalwar/gmail.js","https://www.npmjs.com/advisories/125"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-c7pp-g2v2-2766","url":"https://osv.dev/vulnerability/GHSA-c7pp-g2v2-2766"}],"summary":"DOM-based XSS in gmail-js"}