{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.8.10"}],"component":"stage-js","cve_ids":["CVE-2024-53386"],"ecosystem":"npm","epss":0.0025,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-fp3m-g5rc-4c28","id":"tcs_01M5KFNW0TJNVPNP59JQXMHFEN","modified_at":"2025-06-30T12:51:24Z","published_at":"2025-03-03T09:30:34Z","references":["https://osv.dev/vulnerability/GHSA-fp3m-g5rc-4c28","https://nvd.nist.gov/vuln/detail/CVE-2024-53386","https://gist.github.com/jackfromeast/31d56f1ad17673aabb6ab541e65a5534","https://github.com/piqnt/stage.js","https://github.com/piqnt/stage.js/blob/919f6e94b14242f6e6994141a9e1188439d306d5/lib/core.js#L158-L159"],"severity":{"label":"medium","score":4.9},"sources":[{"source":"osv","source_id":"GHSA-fp3m-g5rc-4c28","url":"https://osv.dev/vulnerability/GHSA-fp3m-g5rc-4c28"}],"summary":"Stage.js DOM Clobbering vulnerabilty"}