{"action":"Upgrade i18next to 3.4.4 or later.","affected":[{"fixed":"3.4.4","introduced":"2.0.0"}],"component":"i18next","cve_ids":["CVE-2017-16010"],"ecosystem":"npm","epss":0.00982,"exploited":false,"fixed_versions":["3.4.4"],"ghsa_id":"GHSA-cmh5-qc8w-xvcq","id":"tcs_01M5KFK4156Z61DQ64XKZ6JK67","modified_at":"2023-11-08T03:58:59.586536Z","published_at":"2018-07-24T19:58:33Z","references":["https://osv.dev/vulnerability/GHSA-cmh5-qc8w-xvcq","https://nvd.nist.gov/vuln/detail/CVE-2017-16010","https://github.com/i18next/i18next/pull/826","https://github.com/advisories/GHSA-cmh5-qc8w-xvcq","https://www.npmjs.com/advisories/326"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-cmh5-qc8w-xvcq","url":"https://osv.dev/vulnerability/GHSA-cmh5-qc8w-xvcq"}],"summary":"Cross-Site Scripting in i18next"}