{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"@atlaskit/editor-core","cve_ids":["CVE-2019-20903"],"ecosystem":"npm","epss":0.01126,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-p5ch-w78f-xh44","id":"tcs_01M5KG2M06NEW8AN50M72W3CEH","modified_at":"2023-11-08T04:01:31.239653Z","published_at":"2022-02-10T20:34:24Z","references":["https://osv.dev/vulnerability/GHSA-p5ch-w78f-xh44","https://nvd.nist.gov/vuln/detail/CVE-2019-20903","https://atlaskit.atlassian.com/packages/editor/editor-core/changelog/113.1.5","https://bitbucket.org/atlassian/atlaskit-mk-2/commits/ca88f616e4","https://confluence.atlassian.com/pages/viewpage.action?pageId=1021244735","https://www.npmjs.com/package/@atlaskit/editor-core"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-p5ch-w78f-xh44","url":"https://osv.dev/vulnerability/GHSA-p5ch-w78f-xh44"}],"summary":"Cross-site scripting in @atlaskit/editor-core"}