{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.3.0"}],"component":"hexo-admin","cve_ids":["CVE-2019-17606"],"ecosystem":"npm","epss":0.01035,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-g784-q3p3-26rm","id":"tcs_01M5KFQGNPJ007BF396M10CZHJ","modified_at":"2023-11-08T04:01:25.107723Z","published_at":"2022-05-24T16:59:45Z","references":["https://osv.dev/vulnerability/GHSA-g784-q3p3-26rm","https://nvd.nist.gov/vuln/detail/CVE-2019-17606","https://github.com/jaredly/hexo-admin/issues/185","https://github.com/418sec/hexo-admin/pull/2","https://github.com/jaredly/hexo-admin/pull/203","https://github.com/jaredly/hexo-admin"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-g784-q3p3-26rm","url":"https://osv.dev/vulnerability/GHSA-g784-q3p3-26rm"}],"summary":"hexo-admin plugin for Node.js XSS Vulnerability"}