{"action":"Upgrade @mattkrick/sanitize-svg to 0.4.0 or later.","affected":[{"fixed":"0.4.0","introduced":"0"}],"component":"@mattkrick/sanitize-svg","cve_ids":["CVE-2023-22461"],"ecosystem":"npm","epss":0.00588,"exploited":false,"fixed_versions":["0.4.0"],"ghsa_id":"GHSA-h857-2g56-468g","id":"tcs_01M5KFTG0W6AMH2A9HDQF02DME","modified_at":"2023-11-08T04:11:35.614154Z","published_at":"2023-01-05T12:18:35Z","references":["https://osv.dev/vulnerability/GHSA-h857-2g56-468g","https://github.com/mattkrick/sanitize-svg/security/advisories/GHSA-h857-2g56-468g","https://nvd.nist.gov/vuln/detail/CVE-2023-22461","https://github.com/mattkrick/sanitize-svg/commit/b107e453ede7b58adcccae74a3e474c012eec85d","https://github.com/mattkrick/sanitize-svg"],"severity":{"label":"high","score":7.6},"sources":[{"source":"osv","source_id":"GHSA-h857-2g56-468g","url":"https://osv.dev/vulnerability/GHSA-h857-2g56-468g"}],"summary":"@mattkrick/sanitize-svg vulnerable to Cross-Site Scripting (XSS)"}