{"action":"Upgrade nunjucks to 2.4.3 or later.","affected":[{"fixed":"2.4.3","introduced":"0"}],"component":"nunjucks","cve_ids":["CVE-2016-10547"],"ecosystem":"npm","epss":0.01418,"exploited":false,"fixed_versions":["2.4.3"],"ghsa_id":"GHSA-f7ph-p5rv-phw2","id":"tcs_01M5KFMWC1BQAN134RJD2TFYN9","modified_at":"2023-11-08T03:58:11.826004Z","published_at":"2018-11-06T23:13:37Z","references":["https://osv.dev/vulnerability/GHSA-f7ph-p5rv-phw2","https://nvd.nist.gov/vuln/detail/CVE-2016-10547","https://github.com/mozilla/nunjucks/issues/835","https://github.com/advisories/GHSA-f7ph-p5rv-phw2","https://github.com/matt-/nunjucks_test","https://www.npmjs.com/advisories/147"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-f7ph-p5rv-phw2","url":"https://osv.dev/vulnerability/GHSA-f7ph-p5rv-phw2"}],"summary":"Cross-Site Scripting in nunjucks"}