{"action":"Upgrade @theia/mini-browser to 0.16.0 or later.","affected":[{"fixed":"0.16.0","introduced":"0.3.9"}],"component":"@theia/mini-browser","cve_ids":["CVE-2019-17636"],"ecosystem":"npm","epss":0.00601,"exploited":false,"fixed_versions":["0.16.0"],"ghsa_id":"GHSA-f7vx-j8mp-3h2x","id":"tcs_01M5KFMXFGFG4GGHW3KTG54VGQ","modified_at":"2023-11-08T04:01:25.353113Z","published_at":"2021-04-13T15:18:01Z","references":["https://osv.dev/vulnerability/GHSA-f7vx-j8mp-3h2x","https://nvd.nist.gov/vuln/detail/CVE-2019-17636","https://github.com/eclipse-theia/theia/pull/7205","https://github.com/eclipse-theia/theia/commit/b212d07f915df1509180944ee3132714bc2636bf","https://bugs.eclipse.org/bugs/show_bug.cgi?id=551747"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-f7vx-j8mp-3h2x","url":"https://osv.dev/vulnerability/GHSA-f7vx-j8mp-3h2x"}],"summary":"Insufficient Verification of Data Authenticity in Eclipse Theia"}