{"action":"Upgrade cyberchef to 8.31.3 or later.","affected":[{"fixed":"8.31.3","introduced":"0"}],"component":"cyberchef","cve_ids":["CVE-2019-15532"],"ecosystem":"npm","epss":0.01311,"exploited":false,"fixed_versions":["8.31.3"],"ghsa_id":"GHSA-jp6r-xcjj-5h7r","id":"tcs_01M5KFYGV5BW5TANZ4STFDXCZ7","modified_at":"2023-11-08T04:01:13.553025Z","published_at":"2019-08-27T17:36:32Z","references":["https://osv.dev/vulnerability/GHSA-jp6r-xcjj-5h7r","https://nvd.nist.gov/vuln/detail/CVE-2019-15532","https://github.com/gchq/CyberChef/issues/539","https://github.com/gchq/CyberChef/issues/544","https://github.com/gchq/CyberChef/commit/01f0625d6a177f9c5df9281f12a27c814c2d8bcf","https://github.com/gchq/CyberChef/compare/v8.31.1...v8.31.2","https://snyk.io/vuln/SNYK-JS-CYBERCHEF-460296","https://www.npmjs.com/advisories/1149"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-jp6r-xcjj-5h7r","url":"https://osv.dev/vulnerability/GHSA-jp6r-xcjj-5h7r"}],"summary":"Cross-Site Scripting in cyberchef"}