{"action":"Upgrade inline_svg to 1.7.2 or later.","affected":[{"fixed":"1.7.2","introduced":"0"}],"component":"inline_svg","cve_ids":["CVE-2020-36644"],"ecosystem":"RubyGems","epss":0.00706,"exploited":false,"fixed_versions":["1.7.2"],"ghsa_id":"GHSA-p33q-4h4m-j994","id":"tcs_01M5KEMD50NNEEGACAS7SQSHPF","modified_at":"2023-11-08T04:03:48.841837Z","published_at":"2023-01-07T12:30:14Z","references":["https://osv.dev/vulnerability/GHSA-p33q-4h4m-j994","https://nvd.nist.gov/vuln/detail/CVE-2020-36644","https://github.com/jamesmartin/inline_svg/pull/117","https://github.com/jamesmartin/inline_svg/commit/f5363b351508486021f99e083c92068cf2943621","https://github.com/jamesmartin/inline_svg","https://github.com/jamesmartin/inline_svg/releases/tag/v1.7.2","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/inline_svg/CVE-2020-36644.yml","https://vuldb.com/?ctiid.217597","https://vuldb.com/?id.217597"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-p33q-4h4m-j994","url":"https://osv.dev/vulnerability/GHSA-p33q-4h4m-j994"}],"summary":"Inline SVG vulnerable to Cross-site Scripting"}