{"action":"Upgrade plone-restapi to 9.15.6 or later.","affected":[{"fixed":"9.15.6","introduced":"0"},{"fixed":"10.0.1","introduced":"10.0.0"}],"component":"plone-restapi","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["9.15.6","10.0.1"],"ghsa_id":"GHSA-8rqh-vxpr-x77p","id":"tcs_01M5KF93CGSFPR49QG6M2CMX7M","modified_at":"2026-07-17T18:45:52.977215601Z","published_at":"2026-07-17T18:36:34Z","references":["https://osv.dev/vulnerability/GHSA-8rqh-vxpr-x77p","https://github.com/plone/plone.app.textfield/security/advisories/GHSA-4r4f-gg25-rmg5","https://github.com/plone/plone.restapi/security/advisories/GHSA-8rqh-vxpr-x77p","https://github.com/plone/plone.restapi"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-8rqh-vxpr-x77p","url":"https://osv.dev/vulnerability/GHSA-8rqh-vxpr-x77p"}],"summary":"plone.restapi: Stored XSS by spoofing mime type"}