{"action":"Upgrade @joeattardi/emoji-button to 4.6.2 or later.","affected":[{"fixed":"4.6.2","introduced":"0"}],"component":"@joeattardi/emoji-button","cve_ids":["CVE-2021-43785"],"ecosystem":"npm","epss":0.01047,"exploited":false,"fixed_versions":["4.6.2"],"ghsa_id":"GHSA-f34m-x9pj-62vq","id":"tcs_01M5KFM890WGX5Q661Z3WRAF9C","modified_at":"2026-07-08T06:27:44.662091967Z","published_at":"2021-12-01T18:29:02Z","references":["https://osv.dev/vulnerability/GHSA-f34m-x9pj-62vq","https://github.com/joeattardi/emoji-button/security/advisories/GHSA-f34m-x9pj-62vq","https://nvd.nist.gov/vuln/detail/CVE-2021-43785","https://github.com/joeattardi/emoji-button/commit/05970c09180cd27fff493e998ac5bf0468b1bb16","https://github.com/joeattardi/emoji-button/commit/fe54bef107eb3f74873a4018f2ff49fa124c6a2e","https://github.com/joeattardi/emoji-button"],"severity":{"label":"high","score":7.6},"sources":[{"source":"osv","source_id":"GHSA-f34m-x9pj-62vq","url":"https://osv.dev/vulnerability/GHSA-f34m-x9pj-62vq"}],"summary":"Cross-Site Scripting Vulnerability in @joeattardi/emoji-button"}