{"action":"Upgrade dojo to 1.9.1 or later.","affected":[{"fixed":"1.9.1","introduced":"0"}],"component":"dojo","cve_ids":["CVE-2015-5654"],"ecosystem":"npm","epss":0.02224,"exploited":false,"fixed_versions":["1.9.1"],"ghsa_id":"GHSA-p82g-2xpp-m5r3","id":"tcs_01M5KG3050GWS6ZED9W1MQEMBY","modified_at":"2023-11-08T03:57:58.594997Z","published_at":"2020-09-11T21:18:05Z","references":["https://osv.dev/vulnerability/GHSA-p82g-2xpp-m5r3","https://nvd.nist.gov/vuln/detail/CVE-2015-5654","https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5654","https://snyk.io/vuln/SNYK-JS-DOJO-174933","https://www.npmjs.com/advisories/973","http://jvn.jp/en/jp/JVN13456571/index.html","http://jvndb.jvn.jp/jvndb/JVNDB-2015-000153","http://www-01.ibm.com/support/docview.wss?uid=swg21975256","http://www.securityfocus.com/bid/77026","http://www.securitytracker.com/id/1034848"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-p82g-2xpp-m5r3","url":"https://osv.dev/vulnerability/GHSA-p82g-2xpp-m5r3"}],"summary":"Cross-Site Scripting in dojo"}