{"action":"Upgrade total4 to 0.0.81 or later.","affected":[{"fixed":"0.0.81","introduced":"0"}],"component":"total4","cve_ids":["CVE-2023-30094"],"ecosystem":"npm","epss":0.00667,"exploited":false,"fixed_versions":["0.0.81"],"ghsa_id":"GHSA-jj45-24rw-v6jw","id":"tcs_01M5KFY6VK1497NATXH1ABBR65","modified_at":"2023-11-08T04:12:22.415550Z","published_at":"2023-05-04T21:30:27Z","references":["https://osv.dev/vulnerability/GHSA-jj45-24rw-v6jw","https://nvd.nist.gov/vuln/detail/CVE-2023-30094","https://github.com/totaljs/flow/issues/100","https://github.com/totaljs/framework4/commit/e2cea690c3fe4453e94da896a69f832511f65179","https://github.com/totaljs/framework4","https://www.edoardoottavianelli.it/CVE-2023-30094","https://www.youtube.com/watch?v=8VbTm2sIdBE","https://www.youtube.com/watch?v=vOb9Fyg3iVo"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-jj45-24rw-v6jw","url":"https://osv.dev/vulnerability/GHSA-jj45-24rw-v6jw"}],"summary":"Cross-site scripting in TotalJS"}