{"action":"Upgrade squirrelly to 9.0.0 or later.","affected":[{"fixed":"9.0.0","introduced":"0"}],"component":"squirrelly","cve_ids":["CVE-2021-32819"],"ecosystem":"npm","epss":0.58286,"exploited":false,"fixed_versions":["9.0.0"],"ghsa_id":"GHSA-q8j6-pwqx-pm96","id":"tcs_01M5KG5PD67D2QHPWB99VG55VQ","modified_at":"2023-11-08T04:06:01.196942Z","published_at":"2021-05-17T20:58:02Z","references":["https://osv.dev/vulnerability/GHSA-q8j6-pwqx-pm96","https://nvd.nist.gov/vuln/detail/CVE-2021-32819","https://github.com/squirrellyjs/squirrelly/pull/254","https://github.com/squirrellyjs/squirrelly/commit/c12418a026f73df645ba927fd29358efe02fed1e","https://github.com/squirrellyjs/squirrelly/commit/dca7a1e7ee91d8a6ffffb655f3f15647486db9da","https://github.com/squirrellyjs/squirrelly","https://securitylab.github.com/advisories/GHSL-2021-023-squirrelly"],"severity":{"label":"high","score":8},"sources":[{"source":"osv","source_id":"GHSA-q8j6-pwqx-pm96","url":"https://osv.dev/vulnerability/GHSA-q8j6-pwqx-pm96"}],"summary":"Insecure template handling in Squirrelly"}