{"action":"Upgrade github.com/gophish/gophish to 0.9.0 or later.","affected":[{"fixed":"0.9.0","introduced":"0"}],"component":"github.com/gophish/gophish","cve_ids":["CVE-2019-16146"],"ecosystem":"Go","epss":0.00657,"exploited":false,"fixed_versions":["0.9.0"],"ghsa_id":"GHSA-9h9f-9q8g-6764","id":"tcs_01M5KF5PT47R976GHQSEQ0AGE7","modified_at":"2024-08-20T20:58:44.069221Z","published_at":"2022-05-24T16:55:43Z","references":["https://osv.dev/vulnerability/GHSA-9h9f-9q8g-6764","https://nvd.nist.gov/vuln/detail/CVE-2019-16146","https://github.com/gophish/gophish/pull/1547","https://github.com/gophish/gophish/commit/24fe998a3aa04e205900476a9601d481e94d8eea"],"severity":{"label":"medium","score":4.8},"sources":[{"source":"osv","source_id":"GHSA-9h9f-9q8g-6764","url":"https://osv.dev/vulnerability/GHSA-9h9f-9q8g-6764"}],"summary":"Gophish XSS Vulnerability"}