{"action":"Upgrade generator-hottowel to 0.5.0 or later.","affected":[{"fixed":"0.5.0","introduced":"0"}],"component":"generator-hottowel","cve_ids":["CVE-2016-15025"],"ecosystem":"npm","epss":0.00535,"exploited":false,"fixed_versions":["0.5.0"],"ghsa_id":"GHSA-f8hv-rx9p-f9r4","id":"tcs_01M5KFN0T438JA9B57EV7BGVF5","modified_at":"2023-11-08T03:58:22.688707Z","published_at":"2023-02-20T12:30:18Z","references":["https://osv.dev/vulnerability/GHSA-f8hv-rx9p-f9r4","https://nvd.nist.gov/vuln/detail/CVE-2016-15025","https://github.com/johnpapa/generator-hottowel/pull/174","https://github.com/johnpapa/generator-hottowel/commit/c17092fd4103143a9ddab93c8983ace8bf174396","https://github.com/johnpapa/generator-hottowel","https://vuldb.com/?ctiid.221484","https://vuldb.com/?id.221484"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-f8hv-rx9p-f9r4","url":"https://osv.dev/vulnerability/GHSA-f8hv-rx9p-f9r4"}],"summary":"generator-hottowel Cross-site Scripting vulnerability"}