{"action":"Upgrade webpack-bundle-analyzer to 3.3.2 or later.","affected":[{"fixed":"3.3.2","introduced":"0"}],"component":"webpack-bundle-analyzer","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["3.3.2"],"ghsa_id":"GHSA-pgr8-jg6h-8gw6","id":"tcs_01M5KG3M3JK24TBW26BCV1XSKJ","modified_at":"2021-08-04T15:26:36Z","published_at":"2019-05-23T09:26:20Z","references":["https://osv.dev/vulnerability/GHSA-pgr8-jg6h-8gw6","https://github.com/webpack-contrib/webpack-bundle-analyzer/issues/263","https://github.com/webpack-contrib/webpack-bundle-analyzer/pull/264","https://github.com/webpack-contrib/webpack-bundle-analyzer/commit/20f2b4c553ee343f491faf63e39427fba9908c7c","https://snyk.io/vuln/SNYK-JS-WEBPACKBUNDLEANALYZER-174190","https://www.npmjs.com/advisories/826"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-pgr8-jg6h-8gw6","url":"https://osv.dev/vulnerability/GHSA-pgr8-jg6h-8gw6"}],"summary":"Cross-Site Scripting in webpack-bundle-analyzer"}