{"action":"Upgrade slim-select to 2.9.2 or later.","affected":[{"fixed":"2.9.2","introduced":"2.0.0"}],"component":"slim-select","cve_ids":["CVE-2024-9440"],"ecosystem":"npm","epss":0.00365,"exploited":false,"fixed_versions":["2.9.2"],"ghsa_id":"GHSA-qvqv-mcxr-x8qw","id":"tcs_01M5KG761BKA28T0VB3ZPYJN5M","modified_at":"2024-10-18T15:03:40Z","published_at":"2024-10-02T21:30:34Z","references":["https://osv.dev/vulnerability/GHSA-qvqv-mcxr-x8qw","https://nvd.nist.gov/vuln/detail/CVE-2024-9440","https://github.com/brianvoe/slim-select/issues/564","https://github.com/brianvoe/slim-select/pull/572","https://github.com/brianvoe/slim-select/commit/f8534f27d6e9bab89024d139f1c4f7555f1efd5e","https://github.com/brianvoe/slim-select","https://github.com/brianvoe/slim-select/blob/e7e37e2ff90e125f846bd98d6b8f278524ead79e/src/slim-select/select.ts#L377","https://vulncheck.com/advisories/slim-select-xss"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-qvqv-mcxr-x8qw","url":"https://osv.dev/vulnerability/GHSA-qvqv-mcxr-x8qw"}],"summary":"Slim Select has potential Cross-site Scripting issue"}