{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"com.wire.bots:lithium","cve_ids":[],"ecosystem":"Maven","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-f36p-42jv-8rh2","id":"tcs_01M5N8TTCFZYDJZ5CS51S6P6BK","modified_at":"2024-11-28T05:29:07.315369Z","published_at":"2022-09-30T04:53:37Z","references":["https://osv.dev/vulnerability/GHSA-f36p-42jv-8rh2","https://github.com/wireapp/lithium/security/advisories/GHSA-f36p-42jv-8rh2","https://github.com/wireapp/lithium/commit/8b9b406d608fe482ec0e7adf8705834bca92d7df","https://github.com/wireapp/lithium"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-f36p-42jv-8rh2#Maven/com.wire.bots:lithium","url":"https://osv.dev/vulnerability/GHSA-f36p-42jv-8rh2"}],"summary":"Lithium vulnerable to Cross Site Scripting in provided Swagger-UI"}