{"action":"Upgrade mobiledoc-kit to 0.14.2 or later.","affected":[{"fixed":"0.14.2","introduced":"0"}],"component":"mobiledoc-kit","cve_ids":["CVE-2022-2932"],"ecosystem":"npm","epss":0.00917,"exploited":false,"fixed_versions":["0.14.2"],"ghsa_id":"GHSA-hw2p-xqhq-3mjf","id":"tcs_01M5KFW69T7D3A05QHQQVP6AHC","modified_at":"2023-11-08T04:09:13.153345Z","published_at":"2022-08-23T00:00:16Z","references":["https://osv.dev/vulnerability/GHSA-hw2p-xqhq-3mjf","https://nvd.nist.gov/vuln/detail/CVE-2022-2932","https://github.com/bustle/mobiledoc-kit/commit/f3fdaa5352904fd2a0b4247ccb0dbf68aad43b5a","https://github.com/bustle/mobiledoc-kit","https://huntr.dev/bounties/2-other-bustle/mobiledoc-kit"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-hw2p-xqhq-3mjf","url":"https://osv.dev/vulnerability/GHSA-hw2p-xqhq-3mjf"}],"summary":"Cross site scripting in mobiledoc-kit"}