{"action":"Upgrade datatables.net to 1.11.3 or later.","affected":[{"fixed":"1.11.3","introduced":"0"}],"component":"datatables.net","cve_ids":["CVE-2021-23445"],"ecosystem":"npm","epss":0.01975,"exploited":false,"fixed_versions":["1.11.3"],"ghsa_id":"GHSA-h73q-5wmj-q8pj","id":"tcs_01M5KFTDXGZVQNDCZQ0J0G98W3","modified_at":"2025-01-14T09:12:22.061173Z","published_at":"2021-09-29T17:11:28Z","references":["https://osv.dev/vulnerability/GHSA-h73q-5wmj-q8pj","https://nvd.nist.gov/vuln/detail/CVE-2021-23445","https://github.com/DataTables/Dist-DataTables/commit/59a8d3f8a3c1138ab08704e783bc52bfe88d7c9b","https://cdn.datatables.net/1.11.3","https://github.com/DataTables/Dist-DataTables","https://lists.debian.org/debian-lts-announce/2023/08/msg00018.html","https://security.netapp.com/advisory/ntap-20240621-0006","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1715371","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1715376","https://snyk.io/vuln/SNYK-JS-DATATABLESNET-1540544"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-h73q-5wmj-q8pj","url":"https://osv.dev/vulnerability/GHSA-h73q-5wmj-q8pj"}],"summary":"Cross site scripting in datatables.net"}