{"action":"Upgrade github.com/microcosm-cc/bluemonday to 1.0.5 or later.","affected":[{"fixed":"1.0.5","introduced":"0"}],"component":"github.com/microcosm-cc/bluemonday","cve_ids":["CVE-2021-29272"],"ecosystem":"Go","epss":0.00929,"exploited":false,"fixed_versions":["1.0.5"],"ghsa_id":"GHSA-3x58-xr87-2fcj","id":"tcs_01M5KEVH6WHZG11N81HRY640R8","modified_at":"2024-05-20T21:19:56Z","published_at":"2021-05-18T21:07:37Z","references":["https://osv.dev/vulnerability/GHSA-3x58-xr87-2fcj","https://nvd.nist.gov/vuln/detail/CVE-2021-29272","https://github.com/microcosm-cc/bluemonday/issues/111","https://github.com/microcosm-cc/bluemonday/commit/524f142fe46e945b7dcd291d7805c4b7dcf75bee","https://github.com/microcosm-cc/bluemonday","https://github.com/microcosm-cc/bluemonday/releases/tag/v1.0.5","https://pkg.go.dev/vuln/GO-2022-0762","https://vuln.ryotak.me/advisories/4","https://vuln.ryotak.me/advisories/4.txt"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-3x58-xr87-2fcj","url":"https://osv.dev/vulnerability/GHSA-3x58-xr87-2fcj"}],"summary":"Cross-site scripting in bluemonday"}