{"action":"Upgrade markdown-to-jsx to 6.11.4 or later.","affected":[{"fixed":"6.11.4","introduced":"0"}],"component":"markdown-to-jsx","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["6.11.4"],"ghsa_id":"GHSA-ccrp-c664-8p4j","id":"tcs_01M5KFJE2E2MA66PGEZEVZ3K78","modified_at":"2021-09-29T19:59:57Z","published_at":"2020-09-03T21:17:36Z","references":["https://osv.dev/vulnerability/GHSA-ccrp-c664-8p4j","https://github.com/probablyup/markdown-to-jsx/pull/307","https://github.com/probablyup/markdown-to-jsx","https://www.npmjs.com/advisories/1219"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-ccrp-c664-8p4j","url":"https://osv.dev/vulnerability/GHSA-ccrp-c664-8p4j"}],"summary":"Cross-Site Scripting in markdown-to-jsx"}