{"action":"Upgrade nilsteampassnet/teampass to 3.0.9 or later.","affected":[{"fixed":"3.0.9","introduced":"0"}],"component":"nilsteampassnet/teampass","cve_ids":["CVE-2023-3086"],"ecosystem":"Packagist","epss":0.00909,"exploited":false,"fixed_versions":["3.0.9"],"ghsa_id":"GHSA-j245-v2mh-5h6f","id":"tcs_01M5KF42H4GC610Y8DYGNCX38F","modified_at":"2024-02-16T08:13:15.661980Z","published_at":"2023-06-03T12:30:15Z","references":["https://osv.dev/vulnerability/GHSA-j245-v2mh-5h6f","https://nvd.nist.gov/vuln/detail/CVE-2023-3086","https://github.com/nilsteampassnet/teampass/commit/1c0825b67eb8f8b5ecc418ff7614423a275e6a79","https://github.com/nilsteampassnet/teampass","https://huntr.dev/bounties/17be9e8a-abe8-41db-987f-1d5b0686ae20"],"severity":{"label":"critical","score":9},"sources":[{"source":"osv","source_id":"GHSA-j245-v2mh-5h6f","url":"https://osv.dev/vulnerability/GHSA-j245-v2mh-5h6f"}],"summary":"TeamPass vulnerable to stored Cross-site Scripting"}