{"action":"Upgrade simple-markdown to 0.4.4 or later.","affected":[{"fixed":"0.4.4","introduced":"0"}],"component":"simple-markdown","cve_ids":["CVE-2019-9844"],"ecosystem":"npm","epss":0.01274,"exploited":false,"fixed_versions":["0.4.4"],"ghsa_id":"GHSA-qj3f-9gmq-fwv5","id":"tcs_01M5KG6A6XAS6K6J4ZNW97JGH9","modified_at":"2023-11-08T04:01:48.013439Z","published_at":"2019-04-09T19:47:29Z","references":["https://osv.dev/vulnerability/GHSA-qj3f-9gmq-fwv5","https://nvd.nist.gov/vuln/detail/CVE-2019-9844","https://github.com/Khan/simple-markdown/pull/63","https://github.com/Khan/simple-markdown","https://github.com/advisories/GHSA-qj3f-9gmq-fwv5","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JFLP3KJVSV5VWMNEBRXLGRVYFXOV5KOG","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KZG2I7VH7WLSEUQ77KYP5CRAVFT2RK2U","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/O5EFW655O3BXZYAPB65XEREXB2DSNSOT","https://www.npmjs.com/advisories/815","https://www.npmjs.com/package/simple-markdown/v/0.4.4"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-qj3f-9gmq-fwv5","url":"https://osv.dev/vulnerability/GHSA-qj3f-9gmq-fwv5"}],"summary":"Cross-Site Scripting in simple-markdown"}