{"action":"Upgrade django-js-reverse to 0.9.1 or later.","affected":[{"fixed":"0.9.1","introduced":"0"}],"component":"django-js-reverse","cve_ids":["CVE-2019-15486"],"ecosystem":"PyPI","epss":0.01043,"exploited":false,"fixed_versions":["0.9.1"],"ghsa_id":"GHSA-vx6v-2rg6-865h","id":"tcs_01M5KG8VX19AMWTXSRMW6DSA76","modified_at":"2023-11-08T04:01:13.373120Z","published_at":"2019-08-23T13:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2019-19","https://github.com/ierror/django-js-reverse/compare/v0.9.0...v0.9.1","https://github.com/ierror/django-js-reverse/pull/81","https://github.com/advisories/GHSA-vx6v-2rg6-865h"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2019-19","url":"https://osv.dev/vulnerability/PYSEC-2019-19"}],"summary":"django-js-reverse (aka Django JS Reverse) before 0.9.1 has XSS via js_reverse_inline."}