{"action":"Upgrade @marp-team/marp-core to 3.9.1 or later.","affected":[{"fixed":"3.9.1","introduced":"3.0.2"},{"fixed":"4.0.1","introduced":"4.0.0"}],"component":"@marp-team/marp-core","cve_ids":["CVE-2024-56510"],"ecosystem":"npm","epss":0.00316,"exploited":false,"fixed_versions":["3.9.1","4.0.1"],"ghsa_id":"GHSA-x52f-h5g4-8qv5","id":"tcs_01M5KGGY01PP86N8B66HT620JX","modified_at":"2024-12-26T21:45:58Z","published_at":"2024-12-26T18:25:25Z","references":["https://osv.dev/vulnerability/GHSA-x52f-h5g4-8qv5","https://github.com/marp-team/marp-core/security/advisories/GHSA-x52f-h5g4-8qv5","https://nvd.nist.gov/vuln/detail/CVE-2024-56510","https://github.com/marp-team/marp-core/pull/282","https://github.com/marp-team/marp-core/commit/61a1def244d1b6faa8e2c0be97ec0b68cab3ab49","https://github.com/marp-team/marp-core","https://github.com/marp-team/marp-core/releases/tag/v3.9.1","https://github.com/marp-team/marp-core/releases/tag/v4.0.1"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-x52f-h5g4-8qv5","url":"https://osv.dev/vulnerability/GHSA-x52f-h5g4-8qv5"}],"summary":"Marp Core allows XSS by improper neutralization of HTML sanitization"}