{"action":"Upgrade react to 0.14.0 or later.","affected":[{"fixed":"0.14.0","introduced":"0.0.1"}],"component":"react","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["0.14.0"],"ghsa_id":"GHSA-hg79-j56m-fxgv","id":"tcs_01M5KFV1XQ46CGCYA9G9CMSV22","modified_at":"2021-10-01T20:15:16Z","published_at":"2020-09-04T15:26:04Z","references":["https://osv.dev/vulnerability/GHSA-hg79-j56m-fxgv","https://github.com/facebook/react","https://reactjs.org/blog/2015/10/07/react-v0.14.html#notable-enhancements","https://reactjs.org/blog/2019/10/22/react-release-channels.html#experimental-channel","https://snyk.io/vuln/npm:react:20150318","https://www.npmjs.com/advisories/1347","http://danlec.com/blog/xss-via-a-spoofed-react-element"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-hg79-j56m-fxgv","url":"https://osv.dev/vulnerability/GHSA-hg79-j56m-fxgv"}],"summary":"Cross-Site Scripting in react"}