{"action":"Upgrade @vendure/admin-ui-plugin to 2.0.3 or later.","affected":[{"fixed":"2.0.3","introduced":"0"}],"component":"@vendure/admin-ui-plugin","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["2.0.3"],"ghsa_id":"GHSA-gm68-572p-q28r","id":"tcs_01M5KFS0H4KV5V6SNQJFJB822B","modified_at":"2023-07-06T15:30:51Z","published_at":"2023-07-06T15:30:51Z","references":["https://osv.dev/vulnerability/GHSA-gm68-572p-q28r","https://github.com/vendure-ecommerce/vendure/security/advisories/GHSA-gm68-572p-q28r","https://github.com/vendure-ecommerce/vendure/commit/0cdc92b241e6fd4017ddfc9fbdca189fc7c1ada0","https://github.com/vendure-ecommerce/vendure","https://github.com/vendure-ecommerce/vendure/blob/master/CHANGELOG.md#203-2023-07-04"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-gm68-572p-q28r","url":"https://osv.dev/vulnerability/GHSA-gm68-572p-q28r"}],"summary":"@vendure/admin-ui-plugin authenticated Cross-site Scripting vulnerability"}