{"action":"Upgrade mdBook to 0.4.5 or later.","affected":[{"fixed":"0.4.5","introduced":"0.1.4"}],"component":"mdBook","cve_ids":["CVE-2020-26297"],"ecosystem":"crates.io","epss":0.0127,"exploited":false,"fixed_versions":["0.4.5"],"ghsa_id":"GHSA-gx5w-rrhp-f436","id":"tcs_01M5KF075ADX7YPBFRHX1MKJG3","modified_at":"2026-09-10T03:49:07.989016522Z","published_at":"2021-08-25T20:56:20Z","references":["https://osv.dev/vulnerability/GHSA-gx5w-rrhp-f436","https://github.com/rust-lang/mdBook/security/advisories/GHSA-gx5w-rrhp-f436","https://nvd.nist.gov/vuln/detail/CVE-2020-26297","https://github.com/rust-lang/mdBook/commit/32abeef088e98327ca0dfccdad92e84afa9d2e9b","https://github.com/rust-lang/mdBook","https://github.com/rust-lang/mdBook/blob/master/CHANGELOG.md#mdbook-045","https://groups.google.com/g/rustlang-security-announcements/c/3-sO6of29O0","https://rustsec.org/advisories/RUSTSEC-2021-0001.html"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GHSA-gx5w-rrhp-f436","url":"https://osv.dev/vulnerability/GHSA-gx5w-rrhp-f436"}],"summary":"XSS in mdBook"}