{"action":"Upgrade kaminari to 1.2.1 or later.","affected":[{"fixed":"1.2.1","introduced":"0"}],"component":"kaminari","cve_ids":["CVE-2020-11082"],"ecosystem":"RubyGems","epss":0.01546,"exploited":false,"fixed_versions":["1.2.1"],"ghsa_id":"GHSA-r5jw-62xg-j433","id":"tcs_01M5KEN69BAD71CS7HTJAP8X8G","modified_at":"2026-09-10T03:48:45.915321761Z","published_at":"2020-05-28T21:10:11Z","references":["https://osv.dev/vulnerability/GHSA-r5jw-62xg-j433","https://github.com/kaminari/kaminari/security/advisories/GHSA-r5jw-62xg-j433","https://nvd.nist.gov/vuln/detail/CVE-2020-11082","https://github.com/github/advisory-review/pull/1020","https://github.com/kaminari/kaminari/commit/8dd52a1aed3d2fa2835d836de23fc0d8c4ff5db8","https://github.com/kaminari/kaminari","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/kaminari/CVE-2020-11082.yml","https://lists.debian.org/debian-lts-announce/2021/09/msg00011.html","https://www.debian.org/security/2021/dsa-5005"],"severity":{"label":"medium","score":6.4},"sources":[{"source":"osv","source_id":"GHSA-r5jw-62xg-j433","url":"https://osv.dev/vulnerability/GHSA-r5jw-62xg-j433"}],"summary":"Cross-Site Scripting in Kaminari"}