{"action":"Upgrade nextcloud-vue-collections to 0.4.2 or later.","affected":[{"fixed":"0.4.2","introduced":"0"}],"component":"nextcloud-vue-collections","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["0.4.2"],"ghsa_id":"GHSA-whv6-rj84-2vh2","id":"tcs_01M5KGF70HZG1MWSTGBC6KD8YZ","modified_at":"2021-10-04T20:36:41Z","published_at":"2020-09-04T17:21:58Z","references":["https://osv.dev/vulnerability/GHSA-whv6-rj84-2vh2","https://github.com/juliushaertl/nextcloud-vue-collections/commit/8ec1fca214f003538cec4137792ede928f25f583","https://github.com/juliushaertl/nextcloud-vue-collections","https://www.npmjs.com/advisories/1442"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-whv6-rj84-2vh2","url":"https://osv.dev/vulnerability/GHSA-whv6-rj84-2vh2"}],"summary":"Cross-Site Scripting in nextcloud-vue-collections"}