{"action":"Upgrade serve to 10.0.2 or later.","affected":[{"fixed":"10.0.2","introduced":"0"}],"component":"serve","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["10.0.2"],"ghsa_id":"GHSA-xw79-hhv6-578c","id":"tcs_01M5KGK2Y510HC70EFAHB2ZMGB","modified_at":"2021-09-28T16:54:33Z","published_at":"2020-09-11T21:16:59Z","references":["https://osv.dev/vulnerability/GHSA-xw79-hhv6-578c","https://github.com/zeit/serve-handler/commit/65b4d4183a31a8076c78c40118acb0ca1b64f620","https://hackerone.com/reports/358641","https://hackerone.com/reports/398285","https://github.com/zeit/serve-handler","https://www.npmjs.com/advisories/971"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-xw79-hhv6-578c","url":"https://osv.dev/vulnerability/GHSA-xw79-hhv6-578c"}],"summary":"Cross-Site Scripting in serve"}