{"action":"Upgrade @theia/console to 1.8.1 or later.","affected":[{"fixed":"1.8.1","introduced":"0"}],"component":"@theia/console","cve_ids":["CVE-2021-28161"],"ecosystem":"npm","epss":0.00708,"exploited":false,"fixed_versions":["1.8.1"],"ghsa_id":"GHSA-cwg9-c9cr-p5fq","id":"tcs_01M5KFKTC05QE4BB3QG8Z766R1","modified_at":"2023-11-08T04:05:28.891741Z","published_at":"2021-04-13T15:18:53Z","references":["https://osv.dev/vulnerability/GHSA-cwg9-c9cr-p5fq","https://nvd.nist.gov/vuln/detail/CVE-2021-28161","https://github.com/eclipse-theia/theia/issues/8794"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-cwg9-c9cr-p5fq","url":"https://osv.dev/vulnerability/GHSA-cwg9-c9cr-p5fq"}],"summary":"Improper Neutralization of Input in Theia console"}