{"action":"Upgrade typo3/html-sanitizer to 1.5.3 or later.","affected":[{"fixed":"1.5.3","introduced":"1.0.0"},{"fixed":"2.1.4","introduced":"2.0.0"}],"component":"typo3/html-sanitizer","cve_ids":["CVE-2023-47125"],"ecosystem":"Packagist","epss":0.00574,"exploited":false,"fixed_versions":["1.5.3","2.1.4"],"ghsa_id":"GHSA-mm79-jhqm-9j54","id":"tcs_01M5KF5NJSYNCK743NV8C7ZAD3","modified_at":"2026-09-10T03:50:04.276093579Z","published_at":"2023-11-14T20:33:27Z","references":["https://osv.dev/vulnerability/GHSA-mm79-jhqm-9j54","https://github.com/TYPO3/html-sanitizer/security/advisories/GHSA-mm79-jhqm-9j54","https://nvd.nist.gov/vuln/detail/CVE-2023-47125","https://github.com/TYPO3/html-sanitizer/commit/b8f90717251d968c49dc77f8c1e5912e2fbe0dff","https://github.com/TYPO3/html-sanitizer","https://typo3.org/security/advisory/typo3-core-sa-2023-007"],"severity":{"label":"medium","score":4.7},"sources":[{"source":"osv","source_id":"GHSA-mm79-jhqm-9j54","url":"https://osv.dev/vulnerability/GHSA-mm79-jhqm-9j54"}],"summary":"Bypassing Cross-Site Scripting Protection in TYPO3 HTML Sanitizer"}