{"action":"Upgrade bpmn-js-properties-panel to 0.31.0 or later.","affected":[{"fixed":"0.31.0","introduced":"0"}],"component":"bpmn-js-properties-panel","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["0.31.0"],"ghsa_id":"GHSA-vpj4-89q8-rh38","id":"tcs_01M5KGCKXGB0N6CGVP9SWX274N","modified_at":"2020-08-31T18:46:32Z","published_at":"2020-09-03T18:16:59Z","references":["https://osv.dev/vulnerability/GHSA-vpj4-89q8-rh38","https://www.npmjs.com/advisories/1079"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-vpj4-89q8-rh38","url":"https://osv.dev/vulnerability/GHSA-vpj4-89q8-rh38"}],"summary":"Cross-Site Scripting in bpmn-js-properties-panel"}