{"action":"Upgrade matestack-ui-core to 0.7.4 or later.","affected":[{"fixed":"0.7.4","introduced":"0"}],"component":"matestack-ui-core","cve_ids":["CVE-2020-5241"],"ecosystem":"RubyGems","epss":0.00627,"exploited":false,"fixed_versions":["0.7.4"],"ghsa_id":"GHSA-3jqw-vv45-mjhh","id":"tcs_01M5KEGB08ZGCEFXFHS7RRS56N","modified_at":"2026-09-10T03:48:42.859630871Z","published_at":"2020-02-12T23:37:46Z","references":["https://osv.dev/vulnerability/GHSA-3jqw-vv45-mjhh","https://github.com/matestack/matestack-ui-core/security/advisories/GHSA-3jqw-vv45-mjhh","https://nvd.nist.gov/vuln/detail/CVE-2020-5241","https://github.com/matestack/matestack-ui-core/commit/5c61571739e860db9ca578fe09ab4733878cb0fc","https://github.com/matestack/matestack-ui-core/commit/e96915cf20c4fa0571df7fa21e9b09a69be19107","https://github.com/matestack/matestack-ui-core","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/matestack-ui-core/CVE-2020-5241.yml"],"severity":{"label":"high","score":7.7},"sources":[{"source":"osv","source_id":"GHSA-3jqw-vv45-mjhh","url":"https://osv.dev/vulnerability/GHSA-3jqw-vv45-mjhh"}],"summary":"XSS/Script injection vulnerability in matestack"}