{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0.1.0","last_affected":"0.3.6"}],"component":"angular-ui-notification","cve_ids":["CVE-2023-34840"],"ecosystem":"npm","epss":0.00595,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-mrcj-5qxr-vhp2","id":"tcs_01M5KG1M417XWCR0Y5YJ0C9Y5M","modified_at":"2023-11-08T04:12:49.095171Z","published_at":"2023-06-30T18:31:01Z","references":["https://osv.dev/vulnerability/GHSA-mrcj-5qxr-vhp2","https://nvd.nist.gov/vuln/detail/CVE-2023-34840","https://github.com/Xh4H/CVE-2023-34840","https://github.com/alexcrack/angular-ui-notification","http://alexcrack.com"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-mrcj-5qxr-vhp2","url":"https://osv.dev/vulnerability/GHSA-mrcj-5qxr-vhp2"}],"summary":"angular-ui-notification Cross-site Scripting vulnerability"}