{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0.0.0"}],"component":"eco","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-r32x-jhw5-g48p","id":"tcs_01M5KG7Q3DVAGY09E7RVPDRBP5","modified_at":"2021-09-28T21:17:47Z","published_at":"2020-09-03T17:08:20Z","references":["https://osv.dev/vulnerability/GHSA-r32x-jhw5-g48p","https://github.com/sstephenson/eco/pull/67","https://github.com/sstephenson/eco","https://www.npmjs.com/advisories/1024"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-r32x-jhw5-g48p","url":"https://osv.dev/vulnerability/GHSA-r32x-jhw5-g48p"}],"summary":"Cross-Site Scripting in eco"}