{"action":"Upgrade mxgraph to 4.0.1 or later.","affected":[{"fixed":"4.0.1","introduced":"0"}],"component":"mxgraph","cve_ids":["CVE-2019-13127"],"ecosystem":"npm","epss":0.01503,"exploited":false,"fixed_versions":["4.0.1"],"ghsa_id":"GHSA-xm59-jvxm-cp3v","id":"tcs_01M5KGJAE1VH9B0QWD4WK3CFEZ","modified_at":"2023-11-08T04:01:07.599199Z","published_at":"2022-05-24T16:49:07Z","references":["https://osv.dev/vulnerability/GHSA-xm59-jvxm-cp3v","https://nvd.nist.gov/vuln/detail/CVE-2019-13127","https://github.com/jgraph/mxgraph/commit/76e8e2809b622659a9c5ffdc4f19922b7a68cfa3","https://marketplace.atlassian.com/apps/1210933/draw-io-diagrams-for-confluence/version-history","https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-032.txt"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-xm59-jvxm-cp3v","url":"https://osv.dev/vulnerability/GHSA-xm59-jvxm-cp3v"}],"summary":"mxGraph vulnerable to cross-site scripting in color field"}