{"action":"Upgrade @toast-ui/editor to 2.2.0 or later.","affected":[{"fixed":"2.2.0","introduced":"0"}],"component":"@toast-ui/editor","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["2.2.0"],"ghsa_id":"GHSA-cr56-66mx-293v","id":"tcs_01M5KFKFCGG31Q0MTQEQ91EXX4","modified_at":"2021-10-04T21:12:14Z","published_at":"2020-09-03T15:53:50Z","references":["https://osv.dev/vulnerability/GHSA-cr56-66mx-293v","https://github.com/nhn/tui.editor/issues/733","https://github.com/nhn/tui.editor/pull/1010","https://github.com/nhn/tui.editor/commit/5f62f5eeda9e8f8bcf2075e8e0e10d22bf56d1a7","https://github.com/nhn/tui.editor","https://www.npmjs.com/advisories/1521"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-cr56-66mx-293v","url":"https://osv.dev/vulnerability/GHSA-cr56-66mx-293v"}],"summary":"Cross-Site Scripting in @toast-ui/editor"}