{"action":"Upgrade trix to 2.1.15 or later.","affected":[{"fixed":"2.1.15","introduced":"0"}],"component":"trix","cve_ids":["CVE-2025-46812"],"ecosystem":"npm","epss":0.00728,"exploited":false,"fixed_versions":["2.1.15"],"ghsa_id":"GHSA-mcrw-746g-9q8h","id":"tcs_01M5KG0G96R7M3W5KMGHRW8QVH","modified_at":"2025-05-08T22:00:43Z","published_at":"2025-05-08T14:48:23Z","references":["https://osv.dev/vulnerability/GHSA-mcrw-746g-9q8h","https://github.com/basecamp/trix/security/advisories/GHSA-mcrw-746g-9q8h","https://nvd.nist.gov/vuln/detail/CVE-2025-46812","https://github.com/basecamp/trix/commit/75226089646841b0f774d8b152e5ec27d2d9e191","https://github.com/basecamp/trix"],"severity":{"label":"low","score":2},"sources":[{"source":"osv","source_id":"GHSA-mcrw-746g-9q8h","url":"https://osv.dev/vulnerability/GHSA-mcrw-746g-9q8h"},{"source":"nvd","source_id":"CVE-2025-46812","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-46812"}],"summary":"Trix vulnerable to Cross-site Scripting on copy & paste"}