{"action":"Upgrade deno_doc to 0.119.0 or later.","affected":[{"fixed":"0.119.0","introduced":"0"}],"component":"deno_doc","cve_ids":["CVE-2024-32468"],"ecosystem":"crates.io","epss":0.00334,"exploited":false,"fixed_versions":["0.119.0"],"ghsa_id":"GHSA-qqwr-j9mm-fhw6","id":"tcs_01M5KF2QWNKGQ9K6FT5S633EPC","modified_at":"2024-11-25T21:46:50Z","published_at":"2024-11-25T19:34:24Z","references":["https://osv.dev/vulnerability/GHSA-qqwr-j9mm-fhw6","https://github.com/denoland/deno/security/advisories/GHSA-qqwr-j9mm-fhw6","https://nvd.nist.gov/vuln/detail/CVE-2024-32468","https://github.com/denoland/deno_doc/commit/0f1ef3efbf16194730a29d93dcb9c02f6c490942","https://github.com/denoland/deno","https://github.com/denoland/deno_doc/blob/dc556c848831d7ae48f3eff2ababc6e75eb6b73e/src/html/templates/pages/search.js#L120-L144"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-qqwr-j9mm-fhw6","url":"https://osv.dev/vulnerability/GHSA-qqwr-j9mm-fhw6"}],"summary":"deno_doc's HTML generator vulnerable to Cross-site Scripting"}