{"action":"Upgrade sanitize to 5.2.1 or later.","affected":[{"fixed":"5.2.1","introduced":"3.0.0"}],"component":"sanitize","cve_ids":["CVE-2020-4054"],"ecosystem":"RubyGems","epss":0.01917,"exploited":false,"fixed_versions":["5.2.1"],"ghsa_id":"GHSA-p4x4-rw2p-8j8m","id":"tcs_01M5KEMDKPP94ZNPJEZE9H15XT","modified_at":"2026-07-08T06:29:13.144817987Z","published_at":"2020-06-16T22:08:06Z","references":["https://osv.dev/vulnerability/GHSA-p4x4-rw2p-8j8m","https://github.com/rgrove/sanitize/security/advisories/GHSA-p4x4-rw2p-8j8m","https://nvd.nist.gov/vuln/detail/CVE-2020-4054","https://github.com/rgrove/sanitize/commit/a11498de9e283cd457b35ee252983662f7452aa9","https://github.com/rgrove/sanitize","https://github.com/rgrove/sanitize/releases/tag/v5.2.1","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/sanitize/CVE-2020-4054.yml","https://usn.ubuntu.com/4543-1","https://www.debian.org/security/2020/dsa-4730"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-p4x4-rw2p-8j8m","url":"https://osv.dev/vulnerability/GHSA-p4x4-rw2p-8j8m"}],"summary":"Cross-site Scripting in Sanitize"}