{"action":"Upgrade @leanprover/unicode-input-component to 0.2.0 or later.","affected":[{"fixed":"0.2.0","introduced":"0"}],"component":"@leanprover/unicode-input-component","cve_ids":["CVE-2026-32732"],"ecosystem":"npm","epss":0.00318,"exploited":false,"fixed_versions":["0.2.0"],"ghsa_id":"GHSA-6ggm-pwr9-r5h2","id":"tcs_01M5KF6ZV205MNQFV2HW654G63","modified_at":"2026-03-16T16:56:19.366316Z","published_at":"2026-03-16T16:39:55Z","references":["https://osv.dev/vulnerability/GHSA-6ggm-pwr9-r5h2","https://github.com/leanprover/vscode-lean4/security/advisories/GHSA-6ggm-pwr9-r5h2","https://nvd.nist.gov/vuln/detail/CVE-2026-32732","https://github.com/leanprover/vscode-lean4/pull/735","https://github.com/leanprover/vscode-lean4","https://leanprover.zulipchat.com/#narrow/channel/113488-general/topic/weird.20behavior.20in.20loogle.20searchbar/near/578502003"],"severity":{"label":"unknown","score":0},"sources":[{"source":"osv","source_id":"GHSA-6ggm-pwr9-r5h2","url":"https://osv.dev/vulnerability/GHSA-6ggm-pwr9-r5h2"},{"source":"nvd","source_id":"CVE-2026-32732","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-32732"}],"summary":"XSS in @leanprover/unicode-input-component"}