{"action":"Upgrade typo3/html-sanitizer to 1.5.1 or later.","affected":[{"fixed":"1.5.1","introduced":"1.0.0"},{"fixed":"2.1.2","introduced":"2.0.0"}],"component":"typo3/html-sanitizer","cve_ids":["CVE-2023-38500"],"ecosystem":"Packagist","epss":0.00508,"exploited":false,"fixed_versions":["1.5.1","2.1.2"],"ghsa_id":"GHSA-59jf-3q9v-rh6g","id":"tcs_01M5KEVWKZT6ZSG7G707HEEJFK","modified_at":"2026-09-10T03:49:54.331507355Z","published_at":"2023-07-25T18:27:16Z","references":["https://osv.dev/vulnerability/GHSA-59jf-3q9v-rh6g","https://github.com/TYPO3/html-sanitizer/security/advisories/GHSA-59jf-3q9v-rh6g","https://nvd.nist.gov/vuln/detail/CVE-2023-38500","https://github.com/TYPO3/html-sanitizer/commit/e3026f589fef0be8c3574ee3f0a0bfbe33d7ebdb","https://github.com/TYPO3/html-sanitizer","https://typo3.org/security/advisory/typo3-core-sa-2023-002"],"severity":{"label":"medium","score":4.7},"sources":[{"source":"osv","source_id":"GHSA-59jf-3q9v-rh6g","url":"https://osv.dev/vulnerability/GHSA-59jf-3q9v-rh6g"}],"summary":"By-passing Cross-Site Scripting Protection in HTML Sanitizer"}