{"action":"Upgrade marked to 0.3.3 or later.","affected":[{"fixed":"0.3.3","introduced":"0"}],"component":"marked","cve_ids":["CVE-2015-1370"],"ecosystem":"npm","epss":0.02042,"exploited":false,"fixed_versions":["0.3.3"],"ghsa_id":"GHSA-cfjh-p3g4-3q2f","id":"tcs_01M5KFJJ6QDD3H69SR8YK4PGYP","modified_at":"2023-11-08T03:57:49.831117Z","published_at":"2017-10-24T18:33:36Z","references":["https://osv.dev/vulnerability/GHSA-cfjh-p3g4-3q2f","https://nvd.nist.gov/vuln/detail/CVE-2015-1370","https://github.com/chjj/marked/issues/492","https://github.com/markedjs/marked/issues/492","https://github.com/evilpacket/marked/commit/3c191144939107c45a7fa11ab6cb88be6694a1ba","https://github.com/markedjs/marked/commit/fc372d1c6293267722e33f2719d57cebd67b3da1","https://github.com/markedjs/marked","https://www.npmjs.com/advisories/24","https://www.npmjs.com/advisories/24/versions","http://www.openwall.com/lists/oss-security/2015/01/23/2"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-cfjh-p3g4-3q2f","url":"https://osv.dev/vulnerability/GHSA-cfjh-p3g4-3q2f"}],"summary":"VBScript Content Injection in marked"}