{"action":"Upgrade xapian-core to 1.4.6 or later.","affected":[{"fixed":"1.4.6","introduced":"0"}],"component":"xapian-core","cve_ids":["CVE-2018-0499"],"ecosystem":"RubyGems","epss":0.01043,"exploited":false,"fixed_versions":["1.4.6"],"ghsa_id":"GHSA-7qw4-w7hf-22q3","id":"tcs_01M5KEHSRWSD9EN4MCXZCB2AZD","modified_at":"2024-02-20T05:22:53.467392Z","published_at":"2022-05-14T03:03:56Z","references":["https://osv.dev/vulnerability/GHSA-7qw4-w7hf-22q3","https://nvd.nist.gov/vuln/detail/CVE-2018-0499","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/xapian-core/CVE-2018-0499.yml","https://lists.xapian.org/pipermail/xapian-discuss/2018-July/009652.html","https://trac.xapian.org/wiki/SecurityFixes/2018-07-02","https://usn.ubuntu.com/3709-1"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-7qw4-w7hf-22q3","url":"https://osv.dev/vulnerability/GHSA-7qw4-w7hf-22q3"}],"summary":"xapian-core Cross-site Scripting vulnerability"}