{"action":"Upgrade ckeditor5 to 43.1.1 or later.","affected":[{"fixed":"43.1.1","introduced":"40.0.0"}],"component":"ckeditor5","cve_ids":["CVE-2024-45613"],"ecosystem":"npm","epss":0.00524,"exploited":false,"fixed_versions":["43.1.1"],"ghsa_id":"GHSA-rgg8-g5x8-wr9v","id":"tcs_01M5KG91674NJ0AFH5K444T29V","modified_at":"2024-10-15T17:29:14Z","published_at":"2024-09-25T18:13:35Z","references":["https://osv.dev/vulnerability/GHSA-rgg8-g5x8-wr9v","https://github.com/ckeditor/ckeditor5/security/advisories/GHSA-rgg8-g5x8-wr9v","https://nvd.nist.gov/vuln/detail/CVE-2024-45613","https://github.com/ckeditor/ckeditor5","https://github.com/ckeditor/ckeditor5/releases/tag/v43.1.1"],"severity":{"label":"high","score":7.2},"sources":[{"source":"osv","source_id":"GHSA-rgg8-g5x8-wr9v","url":"https://osv.dev/vulnerability/GHSA-rgg8-g5x8-wr9v"}],"summary":"Cross-site scripting (XSS) in the clipboard package"}