{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.2.0"}],"component":"scratch-svg-renderer","cve_ids":["CVE-2020-27428"],"ecosystem":"npm","epss":0.00645,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-h3vq-wv8j-36gw","id":"tcs_01M5KFT1W6S96JC6MTMW8CCG00","modified_at":"2023-11-08T04:03:21.559457Z","published_at":"2022-01-08T00:44:33Z","references":["https://osv.dev/vulnerability/GHSA-h3vq-wv8j-36gw","https://nvd.nist.gov/vuln/detail/CVE-2020-27428","https://github.com/LLK/scratch-svg-renderer/commit/7c74ec7de3254143ec3c557677f5355a90a3d07f","https://github.com/LLK/scratch-svg-renderer"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-h3vq-wv8j-36gw","url":"https://osv.dev/vulnerability/GHSA-h3vq-wv8j-36gw"}],"summary":"Cross-site Scripting in Scratch-Svg-Renderer"}