{"action":"Upgrade @spscommerce/ds-react to 7.17.4 or later.","affected":[{"fixed":"7.17.4","introduced":"4.12.2"}],"component":"@spscommerce/ds-react","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["7.17.4"],"ghsa_id":"GHSA-cfxh-frx4-9gjg","id":"tcs_01M5KFJM3HMNHF31QZQ74S4BEM","modified_at":"2023-12-15T03:13:18Z","published_at":"2023-12-15T03:13:18Z","references":["https://osv.dev/vulnerability/GHSA-cfxh-frx4-9gjg","https://github.com/SPSCommerce/woodland/security/advisories/GHSA-cfxh-frx4-9gjg","https://github.com/SPSCommerce/woodland"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-cfxh-frx4-9gjg","url":"https://osv.dev/vulnerability/GHSA-cfxh-frx4-9gjg"}],"summary":"Cross-site Scripting in @spscommerce/ds-react"}