{"action":"Upgrade collective-task to 3.0.9 or later.","affected":[{"fixed":"3.0.9","introduced":"0"}],"component":"collective-task","cve_ids":["CVE-2022-4527"],"ecosystem":"PyPI","epss":0.00594,"exploited":false,"fixed_versions":["3.0.9"],"ghsa_id":"GHSA-4r9h-x77w-mffv","id":"tcs_01M5KEYYTWHWRSF5GXW0WMDJJS","modified_at":"2024-09-13T20:22:54.883764Z","published_at":"2022-12-15T21:30:26Z","references":["https://osv.dev/vulnerability/GHSA-4r9h-x77w-mffv","https://nvd.nist.gov/vuln/detail/CVE-2022-4527","https://github.com/collective/collective.task/commit/1aac7f83fa2c2b41d59ba02748912953461f3fac","https://github.com/collective/collective.task","https://github.com/collective/collective.task/releases/tag/3.0.10","https://github.com/collective/collective.task/releases/tag/3.0.9","https://github.com/pypa/advisory-database/tree/main/vulns/collective-task/PYSEC-2022-42990.yaml","https://vuldb.com/?id.215907"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-4r9h-x77w-mffv","url":"https://osv.dev/vulnerability/GHSA-4r9h-x77w-mffv"}],"summary":"collective.task Cross-site Scripting vulnerability"}