{"action":"Upgrade parse-url to 6.0.1 or later.","affected":[{"fixed":"6.0.1","introduced":"0"}],"component":"parse-url","cve_ids":["CVE-2022-2217"],"ecosystem":"npm","epss":0.01011,"exploited":false,"fixed_versions":["6.0.1"],"ghsa_id":"GHSA-q6wq-5p59-983w","id":"tcs_01M5KG5G873483WX88TXCAGC62","modified_at":"2023-11-08T04:08:11.929476Z","published_at":"2022-06-28T00:01:02Z","references":["https://osv.dev/vulnerability/GHSA-q6wq-5p59-983w","https://nvd.nist.gov/vuln/detail/CVE-2022-2217","https://github.com/ionicabizau/parse-url/commit/21c72ab9412228eea753e2abc48f8962707b1fe3","https://huntr.dev/bounties/4e046c63-b1ca-4bcc-b418-29796918a71b"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-q6wq-5p59-983w","url":"https://osv.dev/vulnerability/GHSA-q6wq-5p59-983w"}],"summary":"Cross site scripting in parse-url"}