{"action":"Upgrade matrix-react-sdk to 3.76.0 or later.","affected":[{"fixed":"3.76.0","introduced":"3.32.0"}],"component":"matrix-react-sdk","cve_ids":["CVE-2023-37259"],"ecosystem":"npm","epss":0.00452,"exploited":false,"fixed_versions":["3.76.0"],"ghsa_id":"GHSA-c9vx-2g7w-rp65","id":"tcs_01M5KFJB0CJPC409DVGXDQVEWF","modified_at":"2023-11-08T04:13:00.301912Z","published_at":"2023-07-18T16:58:01Z","references":["https://osv.dev/vulnerability/GHSA-c9vx-2g7w-rp65","https://github.com/matrix-org/matrix-react-sdk/security/advisories/GHSA-c9vx-2g7w-rp65","https://nvd.nist.gov/vuln/detail/CVE-2023-37259","https://github.com/matrix-org/matrix-react-sdk/commit/22fcd34c606f32129ebc967fc21f24fb708a98b8","https://github.com/matrix-org/matrix-react-sdk","https://github.com/matrix-org/matrix-react-sdk/releases/tag/v3.76.0"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-c9vx-2g7w-rp65","url":"https://osv.dev/vulnerability/GHSA-c9vx-2g7w-rp65"}],"summary":"matrix-react-sdk vulnerable to XSS in Export Chat feature"}