{"action":"Upgrade avo to 2.33.3 or later.","affected":[{"fixed":"2.33.3","introduced":"0"},{"introduced":"3.0.0.pre1","last_affected":"3.0.0.pre12"}],"component":"avo","cve_ids":["CVE-2023-34103"],"ecosystem":"RubyGems","epss":0.00563,"exploited":false,"fixed_versions":["2.33.3"],"ghsa_id":"GHSA-5cr9-5jx3-2g39","id":"tcs_01M5KEGZY2RRX98N4DBDJNY3G1","modified_at":"2026-09-10T03:50:02.444566381Z","published_at":"2023-06-06T14:13:08Z","references":["https://osv.dev/vulnerability/GHSA-5cr9-5jx3-2g39","https://github.com/avo-hq/avo/security/advisories/GHSA-5cr9-5jx3-2g39","https://nvd.nist.gov/vuln/detail/CVE-2023-34103","https://github.com/avo-hq/avo/commit/7891c01e1fba9ca5d7dbccc43d27f385e5d08563","https://github.com/avo-hq/avo","https://github.com/avo-hq/avo/releases/tag/v2.33.3","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/avo/CVE-2023-34103.yml"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-5cr9-5jx3-2g39","url":"https://osv.dev/vulnerability/GHSA-5cr9-5jx3-2g39"}],"summary":"avo vulnerable to Stored XSS (Cross Site Scripting) in html content based fields"}