{"action":"Upgrade rustfs to 1.0.0-alpha.83 or later.","affected":[{"fixed":"1.0.0-alpha.83","introduced":"0"}],"component":"rustfs","cve_ids":["CVE-2026-27822"],"ecosystem":"crates.io","epss":0.05054,"exploited":false,"fixed_versions":["1.0.0-alpha.83"],"ghsa_id":"GHSA-v9fg-3cr2-277j","id":"tcs_01M5KF3F01V1EWR9013RGF24ZH","modified_at":"2026-02-25T23:17:36.679581Z","published_at":"2026-02-25T23:00:18Z","references":["https://osv.dev/vulnerability/GHSA-v9fg-3cr2-277j","https://github.com/rustfs/rustfs/security/advisories/GHSA-v9fg-3cr2-277j","https://nvd.nist.gov/vuln/detail/CVE-2026-27822","https://github.com/rustfs/rustfs","https://github.com/rustfs/rustfs/releases/tag/1.0.0-alpha.83"],"severity":{"label":"critical","score":9},"sources":[{"source":"osv","source_id":"GHSA-v9fg-3cr2-277j","url":"https://osv.dev/vulnerability/GHSA-v9fg-3cr2-277j"}],"summary":"Rust has Critical Stored XSS in Preview Modal, leading to Administrative Account Takeover"}