{"action":"Upgrade scratch-svg-renderer to 0.2.0-prerelease.20201019174008 or later.","affected":[{"fixed":"0.2.0-prerelease.20201019174008","introduced":"0"}],"component":"scratch-svg-renderer","cve_ids":["CVE-2020-7750"],"ecosystem":"npm","epss":0.06125,"exploited":false,"fixed_versions":["0.2.0-prerelease.20201019174008"],"ghsa_id":"GHSA-j977-g5vj-j27g","id":"tcs_01M5KFXGR09DDDA2TGSXFXS38Y","modified_at":"2026-09-10T03:48:35.465333541Z","published_at":"2020-11-09T14:21:17Z","references":["https://osv.dev/vulnerability/GHSA-j977-g5vj-j27g","https://nvd.nist.gov/vuln/detail/CVE-2020-7750","https://github.com/LLK/scratch-svg-renderer/commit/9ebf57588aa596c4fa3bb64209e10ade395aee90","https://snyk.io/vuln/SNYK-JS-SCRATCHSVGRENDERER-1020497"],"severity":{"label":"critical","score":9.6},"sources":[{"source":"osv","source_id":"GHSA-j977-g5vj-j27g","url":"https://osv.dev/vulnerability/GHSA-j977-g5vj-j27g"}],"summary":"Cross-Site Scripting in scratch-svg-renderer"}