{"action":"Upgrade ibexa/admin-ui-assets to 4.6.21 or later.","affected":[{"fixed":"4.6.21","introduced":"4.6.0-alpha1"}],"component":"ibexa/admin-ui-assets","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["4.6.21"],"ghsa_id":"GHSA-vhgq-r8gx-5fpv","id":"tcs_01M5KF96YCMRYWDP948HBKG4GA","modified_at":"2025-06-13T15:29:43.016525Z","published_at":"2025-06-13T14:50:05Z","references":["https://osv.dev/vulnerability/GHSA-vhgq-r8gx-5fpv","https://github.com/ibexa/admin-ui-assets/security/advisories/GHSA-vhgq-r8gx-5fpv","https://github.com/ibexa/admin-ui-assets/commit/219b71b70aaea9321947d2dbeb49fff1b49e05f4","https://developers.ibexa.co/security-advisories/ibexa-sa-2025-003-xss-vulnerabilities-in-back-office","https://github.com/ibexa/admin-ui-assets"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-vhgq-r8gx-5fpv","url":"https://osv.dev/vulnerability/GHSA-vhgq-r8gx-5fpv"}],"summary":"Ibexa Admin UI assets XSS vulnerabilities in back office"}