{"action":"Upgrade @openlist-frontend/openlist-frontend to 4.0.0-rc.4 or later.","affected":[{"fixed":"4.0.0-rc.4","introduced":"0"}],"component":"@openlist-frontend/openlist-frontend","cve_ids":["CVE-2025-50183"],"ecosystem":"npm","epss":0.00316,"exploited":false,"fixed_versions":["4.0.0-rc.4"],"ghsa_id":"GHSA-2hw3-h8qx-hqqp","id":"tcs_01M5KET8TJF2T738ZYWKEZ0K2K","modified_at":"2025-06-19T15:19:19Z","published_at":"2025-06-18T14:41:25Z","references":["https://osv.dev/vulnerability/GHSA-2hw3-h8qx-hqqp","https://github.com/OpenListTeam/OpenList/security/advisories/GHSA-2hw3-h8qx-hqqp","https://nvd.nist.gov/vuln/detail/CVE-2025-50183","https://github.com/OpenListTeam/OpenList-Frontend/commit/7b5ed20c608c7b9b36d1950a386678e0a89f8175","https://github.com/OpenListTeam/OpenList"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-2hw3-h8qx-hqqp","url":"https://osv.dev/vulnerability/GHSA-2hw3-h8qx-hqqp"}],"summary":"OpenList (frontend) allows XSS Attacks in the built-in Markdown Viewer"}