{"action":"Upgrade @progress/kendo-angular-editor to 1.2.3 or later.","affected":[{"fixed":"1.2.3","introduced":"0"}],"component":"@progress/kendo-angular-editor","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["1.2.3"],"ghsa_id":"GHSA-j7wp-vjj6-cp5m","id":"tcs_01M5KFXAMES5XH3HXHRFHTNKVX","modified_at":"2021-09-23T18:55:46Z","published_at":"2020-08-11T19:40:10Z","references":["https://osv.dev/vulnerability/GHSA-j7wp-vjj6-cp5m","https://github.com/telerik/kendo-angular-editor","https://stackblitz.com/edit/angular-6xzuzp-tef7lb?file=app/app.component.ts","https://www.npmjs.com/advisories/1549"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-j7wp-vjj6-cp5m","url":"https://osv.dev/vulnerability/GHSA-j7wp-vjj6-cp5m"}],"summary":"Cross-Site Scripting in @progress/kendo-angular-editor"}