{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.8.20"}],"component":"summernote","cve_ids":["CVE-2024-37629"],"ecosystem":"npm","epss":0.00474,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-cc55-mvqc-g9mg","id":"tcs_01M5KFJBX6C61S60CAS1K01DWG","modified_at":"2025-03-21T04:28:09Z","published_at":"2024-06-12T18:30:41Z","references":["https://osv.dev/vulnerability/GHSA-cc55-mvqc-g9mg","https://nvd.nist.gov/vuln/detail/CVE-2024-37629","https://github.com/summernote/summernote/issues/4642","https://github.com/summernote/summernote","https://grumpz.net/cve-2024-37629-simple-xss-payload-exploits-0day-vulnerability-in-10000-web-apps"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-cc55-mvqc-g9mg","url":"https://osv.dev/vulnerability/GHSA-cc55-mvqc-g9mg"}],"summary":"SummerNote Cross Site Scripting Vulnerability"}