{"action":"Upgrade @webiny/react-rich-text-renderer to 5.37.2 or later.","affected":[{"fixed":"5.37.2","introduced":"0"}],"component":"@webiny/react-rich-text-renderer","cve_ids":["CVE-2023-41167"],"ecosystem":"npm","epss":0.00392,"exploited":false,"fixed_versions":["5.37.2"],"ghsa_id":"GHSA-3x59-vrmc-5mx6","id":"tcs_01M5KEYK0YN6PVBD1Z6V6JP7MQ","modified_at":"2026-07-08T06:28:43.333754822Z","published_at":"2023-08-24T22:16:20Z","references":["https://osv.dev/vulnerability/GHSA-3x59-vrmc-5mx6","https://github.com/webiny/webiny-js/security/advisories/GHSA-3x59-vrmc-5mx6","https://nvd.nist.gov/vuln/detail/CVE-2023-41167","https://github.com/webiny/webiny-js/commit/8748bc53fe862bb03d4459ccc0be39084a5d35c0","https://github.com/webiny/webiny-js","https://webiny.com"],"severity":{"label":"medium","score":4.8},"sources":[{"source":"osv","source_id":"GHSA-3x59-vrmc-5mx6","url":"https://osv.dev/vulnerability/GHSA-3x59-vrmc-5mx6"}],"summary":"@webiny/react-rich-text-renderer vulnerable to insecure rendering of rich text content"}