{"action":"Upgrade antsword to 2.1.0 or later.","affected":[{"fixed":"2.1.0","introduced":"0"}],"component":"antsword","cve_ids":["CVE-2019-13970"],"ecosystem":"npm","epss":0.01874,"exploited":false,"fixed_versions":["2.1.0"],"ghsa_id":"GHSA-hq75-ggc3-8h3q","id":"tcs_01M5KFVT2M4RFVJN4X1PBF2MEZ","modified_at":"2023-11-08T04:01:09.150432Z","published_at":"2022-05-24T16:50:44Z","references":["https://osv.dev/vulnerability/GHSA-hq75-ggc3-8h3q","https://nvd.nist.gov/vuln/detail/CVE-2019-13970","https://github.com/AntSwordProject/antSword/issues/151","https://github.com/AntSwordProject/antSword/commit/4b932e81447b4b0475f4fce45525547395c249d3","https://github.com/AntSwordProject/antSword","https://github.com/AntSwordProject/antSword/compare/ed01dea...834063a"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-hq75-ggc3-8h3q","url":"https://osv.dev/vulnerability/GHSA-hq75-ggc3-8h3q"}],"summary":"AntSword RCE and XSS via code injection"}