{"action":"Upgrade @builder.io/qwik to 0.16.2 or later.","affected":[{"fixed":"0.16.2","introduced":"0"}],"component":"@builder.io/qwik","cve_ids":["CVE-2023-0410"],"ecosystem":"npm","epss":0.00458,"exploited":false,"fixed_versions":["0.16.2"],"ghsa_id":"GHSA-hm7f-rq7q-j9xp","id":"tcs_01M5KFVG5T7XD2WTKPZ9B134EP","modified_at":"2023-11-08T04:11:08.341920Z","published_at":"2023-01-20T03:30:28Z","references":["https://osv.dev/vulnerability/GHSA-hm7f-rq7q-j9xp","https://nvd.nist.gov/vuln/detail/CVE-2023-0410","https://github.com/builderio/qwik/commit/4b2f89dbbd2bc0a2c92eae1a49bdd186e589151a","https://github.com/BuilderIO/qwik","https://huntr.dev/bounties/2da583f0-7f66-4ba7-9bed-8e7229aa578e"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-hm7f-rq7q-j9xp","url":"https://osv.dev/vulnerability/GHSA-hm7f-rq7q-j9xp"}],"summary":"@builder.io/qwik vulnerable to Cross-site Scripting"}