{"action":"Upgrade @rocket.chat/livechat to 1.9.0 or later.","affected":[{"fixed":"1.9.0","introduced":"0"}],"component":"@rocket.chat/livechat","cve_ids":["CVE-2022-21830"],"ecosystem":"npm","epss":0.0077,"exploited":false,"fixed_versions":["1.9.0"],"ghsa_id":"GHSA-hf55-c445-2w97","id":"tcs_01M5KFTTTQJ0935E8HGRA67YJ7","modified_at":"2023-11-08T04:08:10.998921Z","published_at":"2022-04-03T00:01:00Z","references":["https://osv.dev/vulnerability/GHSA-hf55-c445-2w97","https://nvd.nist.gov/vuln/detail/CVE-2022-21830","https://github.com/RocketChat/Rocket.Chat.Livechat/pull/558","https://hackerone.com/reports/1091118","https://github.com/RocketChat/Rocket.Chat.Livechat","https://github.com/RocketChat/Rocket.Chat.Livechat/releases/tag/v1.9.0"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-hf55-c445-2w97","url":"https://osv.dev/vulnerability/GHSA-hf55-c445-2w97"}],"summary":"Cross-site Scripting in @rocket.chat/livechat"}