{"action":"Upgrade netcarver/textile to 4.1.3 or later.","affected":[{"fixed":"4.1.3","introduced":"0"}],"component":"netcarver/textile","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["4.1.3"],"ghsa_id":"GHSA-95m2-chm4-mq7m","id":"tcs_01M5KEZPF2WKF1TSJCT9WEES6Y","modified_at":"2025-01-07T17:28:16.014884Z","published_at":"2025-01-07T17:11:02Z","references":["https://osv.dev/vulnerability/GHSA-95m2-chm4-mq7m","https://github.com/textile/php-textile/security/advisories/GHSA-95m2-chm4-mq7m","https://github.com/textile/php-textile/commit/ab18ae9703bee8b15f1b9d889d40e1881728bae6","https://github.com/textile/php-textile"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-95m2-chm4-mq7m","url":"https://osv.dev/vulnerability/GHSA-95m2-chm4-mq7m"}],"summary":"PHP-Textile has persistent XSS vulnerability in image link handling"}