{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"4.2.2"}],"component":"mxgraph","cve_ids":["CVE-2022-40440"],"ecosystem":"npm","epss":0.00713,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-j4rv-pr9g-q8jv","id":"tcs_01M5KFWYS8X8TBBAVEN5QGAC2Z","modified_at":"2023-11-08T04:10:23.954738Z","published_at":"2022-10-12T12:00:19Z","references":["https://osv.dev/vulnerability/GHSA-j4rv-pr9g-q8jv","https://nvd.nist.gov/vuln/detail/CVE-2022-40440","https://github.com/SxB64/mxgraph-xss-vul/wiki","https://github.com/jgraph/mxgraph"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-j4rv-pr9g-q8jv","url":"https://osv.dev/vulnerability/GHSA-j4rv-pr9g-q8jv"}],"summary":"mxGraph vulnerable to cross-site scripting in setTooltips function"}