{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.15.2"}],"component":"github.com/xyproto/algernon","cve_ids":["CVE-2023-26131"],"ecosystem":"Go","epss":0.00691,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-g47h-fgcw-g4ph","id":"tcs_01M5KFA988MNZTS4KECMH62XNR","modified_at":"2023-11-08T04:11:59.253746Z","published_at":"2023-05-31T06:30:39Z","references":["https://osv.dev/vulnerability/GHSA-g47h-fgcw-g4ph","https://nvd.nist.gov/vuln/detail/CVE-2023-26131","https://github.com/xyproto/algernon","https://github.com/xyproto/algernon/blob/aab484608651852d02a8a93f40baf53ed93e639a/engine/handlers.go#L512","https://github.com/xyproto/algernon/blob/aab484608651852d02a8a93f40baf53ed93e639a/engine/handlers.go#L514","https://github.com/xyproto/algernon/blob/aab484608651852d02a8a93f40baf53ed93e639a/themes/html.go#L145","https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMXYPROTOALGERNONENGINE-3312111","https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMXYPROTOALGERNONTHEMES-3312112"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-g47h-fgcw-g4ph","url":"https://osv.dev/vulnerability/GHSA-g47h-fgcw-g4ph"}],"summary":"Algernon engine and themes vulnerable to Cross-site Scripting"}