{"action":"Upgrade francoisjacquet/rosariosis to 9.1 or later.","affected":[{"fixed":"9.1","introduced":"0"}],"component":"francoisjacquet/rosariosis","cve_ids":["CVE-2022-2036"],"ecosystem":"Packagist","epss":0.00902,"exploited":false,"fixed_versions":["9.1"],"ghsa_id":"GHSA-4hpr-hh77-6q9p","id":"tcs_01M5KEV1EQFEBAQBYBVGMMBRZ6","modified_at":"2023-11-08T04:07:56.976591Z","published_at":"2022-06-10T00:00:55Z","references":["https://osv.dev/vulnerability/GHSA-4hpr-hh77-6q9p","https://nvd.nist.gov/vuln/detail/CVE-2022-2036","https://github.com/francoisjacquet/rosariosis/commit/6e213b17e6ac3a3961e1eabcdaba1c892844398a","https://github.com/francoisjacquet/rosariosis","https://huntr.dev/bounties/c7715149-f99c-4d62-a5c6-c78bfdb41905"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-4hpr-hh77-6q9p","url":"https://osv.dev/vulnerability/GHSA-4hpr-hh77-6q9p"}],"summary":"Cross site scripting in francoisjacquet/rosariosis"}