{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.6.1"}],"component":"github.com/leanote/leanote","cve_ids":["CVE-2021-4263"],"ecosystem":"Go","epss":0.00563,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-6cmv-2548-82v4","id":"tcs_01M5KEZZCAQEANT1NABAR23WDR","modified_at":"2023-11-08T04:07:07.071316Z","published_at":"2022-12-21T21:30:15Z","references":["https://osv.dev/vulnerability/GHSA-6cmv-2548-82v4","https://nvd.nist.gov/vuln/detail/CVE-2021-4263","https://github.com/leanote/leanote/commit/0f9733c890077942150696dcc6d2b1482b7a0a19","https://github.com/leanote/leanote","https://vuldb.com/?ctiid.216461","https://vuldb.com/?id.216461"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-6cmv-2548-82v4","url":"https://osv.dev/vulnerability/GHSA-6cmv-2548-82v4"}],"summary":"leanote vulnerable to cross-site scripting"}