{"action":"Upgrade cloudcmd to 9.1.6 or later.","affected":[{"fixed":"9.1.6","introduced":"0"}],"component":"cloudcmd","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["9.1.6"],"ghsa_id":"GHSA-m8fw-534v-xm85","id":"tcs_01M5KG05D4MMT58QKY8WQ3JCDC","modified_at":"2020-08-31T18:31:00Z","published_at":"2019-06-04T15:43:29Z","references":["https://osv.dev/vulnerability/GHSA-m8fw-534v-xm85","https://github.com/coderaiser/cloudcmd/commit/23f4d4702cd3d473977285f26ea2ae7206b45f38","https://hackerone.com/reports/341044","https://hackerone.com/reports/341044)","https://www.npmjs.com/advisories/642"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-m8fw-534v-xm85","url":"https://osv.dev/vulnerability/GHSA-m8fw-534v-xm85"}],"summary":"Cross-Site Scripting (XSS) in cloudcmd"}