{"action":"Upgrade scancodeio to 32.5.2 or later.","affected":[{"fixed":"32.5.2","introduced":"0"}],"component":"scancodeio","cve_ids":["CVE-2023-40024"],"ecosystem":"PyPI","epss":0.00506,"exploited":false,"fixed_versions":["32.5.2"],"ghsa_id":"GHSA-6xcx-gx7r-rccj","id":"tcs_01M5KF4GH87836N7QAYQMNR7AE","modified_at":"2026-09-10T03:49:57.536585679Z","published_at":"2023-08-15T20:04:49Z","references":["https://osv.dev/vulnerability/GHSA-6xcx-gx7r-rccj","https://github.com/nexB/scancode.io/security/advisories/GHSA-6xcx-gx7r-rccj","https://nvd.nist.gov/vuln/detail/CVE-2023-40024","https://github.com/nexB/scancode.io","https://github.com/nexB/scancode.io/blob/dd7769fbc97c84545579cebf1dc4838214098a11/CHANGELOG.rst#v3252-2023-08-14","https://github.com/nexB/scancode.io/releases/tag/v32.5.2"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-6xcx-gx7r-rccj","url":"https://osv.dev/vulnerability/GHSA-6xcx-gx7r-rccj"}],"summary":"Scancode.io Reflected Cross-Site Scripting (XSS) in license endpoint"}