{"action":"Upgrade @urql/next to 1.1.1 or later.","affected":[{"fixed":"1.1.1","introduced":"0"}],"component":"@urql/next","cve_ids":["CVE-2024-24556"],"ecosystem":"npm","epss":0.00355,"exploited":false,"fixed_versions":["1.1.1"],"ghsa_id":"GHSA-qhjf-hm5j-335w","id":"tcs_01M5KG67QCDE32TM7RYZ2GNQTM","modified_at":"2026-09-10T03:50:09.382768474Z","published_at":"2024-01-30T20:57:28Z","references":["https://osv.dev/vulnerability/GHSA-qhjf-hm5j-335w","https://github.com/urql-graphql/urql/security/advisories/GHSA-qhjf-hm5j-335w","https://nvd.nist.gov/vuln/detail/CVE-2024-24556","https://github.com/urql-graphql/urql/commit/4b7011b70d5718728ff912d02a4dbdc7f703540d","https://github.com/urql-graphql/urql"],"severity":{"label":"high","score":7.2},"sources":[{"source":"osv","source_id":"GHSA-qhjf-hm5j-335w","url":"https://osv.dev/vulnerability/GHSA-qhjf-hm5j-335w"}],"summary":"@urql/next Cross-site Scripting vulnerability"}