{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.5.2"}],"component":"glossarizer","cve_ids":["CVE-2024-42515"],"ecosystem":"npm","epss":0.00474,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-hhhv-ggjx-q9j2","id":"tcs_01M5KFV7TMGY428AYZY9GX6QGT","modified_at":"2024-11-01T22:12:21.159875Z","published_at":"2024-10-31T21:31:45Z","references":["https://osv.dev/vulnerability/GHSA-hhhv-ggjx-q9j2","https://nvd.nist.gov/vuln/detail/CVE-2024-42515","https://github.com/PebbleRoad/glossarizer","https://herolab.usd.de/security-advisories/usd-2024-0011","https://www.npmjs.com/package/glossarizer"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-hhhv-ggjx-q9j2","url":"https://osv.dev/vulnerability/GHSA-hhhv-ggjx-q9j2"}],"summary":"Glossarizer Cross-site Scripting vulnerability"}