{"action":"Upgrade sanitize-html to 2.3.1 or later.","affected":[{"fixed":"2.3.1","introduced":"0"}],"component":"sanitize-html","cve_ids":["CVE-2021-26539"],"ecosystem":"npm","epss":0.01977,"exploited":false,"fixed_versions":["2.3.1"],"ghsa_id":"GHSA-rjqq-98f6-6j3r","id":"tcs_01M5KG9BDC50B73KFYKBDHJJJ9","modified_at":"2023-11-08T04:05:21.094678Z","published_at":"2021-05-06T16:10:05Z","references":["https://osv.dev/vulnerability/GHSA-rjqq-98f6-6j3r","https://nvd.nist.gov/vuln/detail/CVE-2021-26539","https://github.com/apostrophecms/sanitize-html/pull/458","https://github.com/apostrophecms/sanitize-html/commit/bdf7836ef8f0e5b21f9a1aab0623ae8fcd09c1da","https://advisory.checkmarx.net/advisory/CX-2021-4308","https://github.com/apostrophecms/sanitize-html","https://github.com/apostrophecms/sanitize-html/blob/main/CHANGELOG.md#231-2021-01-22"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-rjqq-98f6-6j3r","url":"https://osv.dev/vulnerability/GHSA-rjqq-98f6-6j3r"}],"summary":"Improper Input Validation in sanitize-html"}