{"action":"Upgrade sanitize to 6.0.2 or later.","affected":[{"fixed":"6.0.2","introduced":"3.0.0"}],"component":"sanitize","cve_ids":["CVE-2023-36823"],"ecosystem":"RubyGems","epss":0.00712,"exploited":false,"fixed_versions":["6.0.2"],"ghsa_id":"GHSA-f5ww-cq3m-q3g7","id":"tcs_01M5KEJYG9PTA6QWZ3BZ71BZ5T","modified_at":"2024-02-16T07:55:20.893240Z","published_at":"2023-07-06T19:45:44Z","references":["https://osv.dev/vulnerability/GHSA-f5ww-cq3m-q3g7","https://github.com/rgrove/sanitize/security/advisories/GHSA-f5ww-cq3m-q3g7","https://nvd.nist.gov/vuln/detail/CVE-2023-36823","https://github.com/rgrove/sanitize/commit/76ed46e6dc70820f38efe27de8dabd54dddb5220","https://github.com/rgrove/sanitize","https://github.com/rgrove/sanitize/releases/tag/v6.0.2","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/sanitize/CVE-2023-36823.yml","https://lists.debian.org/debian-lts-announce/2023/11/msg00008.html"],"severity":{"label":"high","score":7.1},"sources":[{"source":"osv","source_id":"GHSA-f5ww-cq3m-q3g7","url":"https://osv.dev/vulnerability/GHSA-f5ww-cq3m-q3g7"}],"summary":"Sanitize vulnerable to Cross-site Scripting via insufficient neutralization of `style` element content"}