{
  "affected": [
    {
      "package": {
        "ecosystem": "npm",
        "name": "md-data-table"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0.0.0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [],
  "database_specific": {
    "cwe_ids": [
      "CWE-79"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2020-08-31T18:34:23Z",
    "nvd_published_at": null,
    "severity": "HIGH"
  },
  "details": "All versions of `md-data-table` are vulnerable to cross-site scripting (XSS). This vulnerability is exploitable if an attacker has control over data that is rendered by `mdt-row`\n\n\n## Recommendation\n\nAs there is no fix for this vulnerability at this time we recommend either selecting another package to perform this functionality or properly sanitizing all user data prior to rendering with `md-data-table`",
  "id": "GHSA-hgr5-82rc-p936",
  "modified": "2020-08-31T18:34:23Z",
  "published": "2020-09-01T21:24:41Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://www.npmjs.com/advisories/748"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [],
  "summary": "Cross-Site Scripting in md-data-table"
}