{"action":"Upgrade pannellum to 2.5.5 or later.","affected":[{"fixed":"2.5.5","introduced":"2.5.0"}],"component":"pannellum","cve_ids":["CVE-2019-16763"],"ecosystem":"npm","epss":0.00697,"exploited":false,"fixed_versions":["2.5.5"],"ghsa_id":"GHSA-m52x-29pq-w3vv","id":"tcs_01M5KFZKDE94GXBWMBZRWA2XSS","modified_at":"2026-07-08T06:00:39.393569619Z","published_at":"2019-11-22T18:18:03Z","references":["https://osv.dev/vulnerability/GHSA-m52x-29pq-w3vv","https://github.com/mpetroff/pannellum/security/advisories/GHSA-m52x-29pq-w3vv","https://nvd.nist.gov/vuln/detail/CVE-2019-16763","https://github.com/mpetroff/pannellum/commit/cc2f3d99953de59db908e0c6efd1c2c17f7c6914","https://github.com/advisories/GHSA-m52x-29pq-w3vv","https://github.com/mpetroff/pannellum","https://www.npmjs.com/advisories/1418"],"severity":{"label":"medium","score":4.8},"sources":[{"source":"osv","source_id":"GHSA-m52x-29pq-w3vv","url":"https://osv.dev/vulnerability/GHSA-m52x-29pq-w3vv"}],"summary":"Pannellum Cross-Site Scripting due to data not being sanitized for URIs or vbscript"}