{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"18.1.3-beta.1"}],"component":"ag-grid","cve_ids":["CVE-2017-16009"],"ecosystem":"npm","epss":0.01021,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-wfw3-rgfr-6g67","id":"tcs_01M5KGEYRGC6DJJD5PRYG2F3MV","modified_at":"2023-11-08T03:58:59.526744Z","published_at":"2020-09-01T16:40:42Z","references":["https://osv.dev/vulnerability/GHSA-wfw3-rgfr-6g67","https://nvd.nist.gov/vuln/detail/CVE-2017-16009","https://github.com/ceolter/ag-grid/issues/1287","https://github.com/ag-grid/ag-grid","https://spring.io/blog/2016/01/28/angularjs-escaping-the-expression-sandbox-for-xss"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-wfw3-rgfr-6g67","url":"https://osv.dev/vulnerability/GHSA-wfw3-rgfr-6g67"}],"summary":"XSS via Angular Expression in ag-grid"}