{"action":"Upgrade decidim to 0.27.6 or later.","affected":[{"fixed":"0.27.6","introduced":"0"},{"fixed":"0.28.1","introduced":"0.28.0.rc1"}],"component":"decidim","cve_ids":["CVE-2024-32469"],"ecosystem":"RubyGems","epss":0.00417,"exploited":false,"fixed_versions":["0.27.6","0.28.1"],"ghsa_id":"GHSA-7cx8-44pc-xv3q","id":"tcs_01M5KEHP78P0NVXGM2DH0JB6ZJ","modified_at":"2026-09-10T03:50:16.352801811Z","published_at":"2024-07-10T15:43:39Z","references":["https://osv.dev/vulnerability/GHSA-7cx8-44pc-xv3q","https://github.com/decidim/decidim/security/advisories/GHSA-7cx8-44pc-xv3q","https://nvd.nist.gov/vuln/detail/CVE-2024-32469","https://github.com/decidim/decidim","https://github.com/decidim/decidim/releases/tag/v0.27.6","https://github.com/decidim/decidim/releases/tag/v0.28.1","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/decidim/CVE-2024-32469.yml"],"severity":{"label":"high","score":7.1},"sources":[{"source":"osv","source_id":"GHSA-7cx8-44pc-xv3q","url":"https://osv.dev/vulnerability/GHSA-7cx8-44pc-xv3q"}],"summary":"Decidim cross-site scripting (XSS) in the pagination"}