{"action":"Upgrade twitter-fetcher-js to 18.0.0 or later.","affected":[{"fixed":"18.0.0","introduced":"0"}],"component":"twitter-fetcher-js","cve_ids":["CVE-2018-25058"],"ecosystem":"npm","epss":0.00542,"exploited":false,"fixed_versions":["18.0.0"],"ghsa_id":"GHSA-m688-cx2p-rgq9","id":"tcs_01M5KFZSF44VHYTHNHMBBC0TBB","modified_at":"2023-11-08T04:00:15.652844Z","published_at":"2022-12-29T09:30:19Z","references":["https://osv.dev/vulnerability/GHSA-m688-cx2p-rgq9","https://nvd.nist.gov/vuln/detail/CVE-2018-25058","https://github.com/jasonmayes/Twitter-Post-Fetcher/pull/170","https://github.com/jasonmayes/Twitter-Post-Fetcher/commit/7d281c6fb5acbc29a2cad295262c1f0c19ca56f3","https://github.com/jasonmayes/Twitter-Post-Fetcher","https://github.com/jasonmayes/Twitter-Post-Fetcher/releases/tag/18.0.0","https://vuldb.com/?ctiid.217017","https://vuldb.com/?id.217017"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-m688-cx2p-rgq9","url":"https://osv.dev/vulnerability/GHSA-m688-cx2p-rgq9"}],"summary":"Twitter-Post-Fetcher vulnerable to Use of Web Link to Untrusted Target with window.opener Access"}