{"action":"Upgrade streamlit to 0.81.0 or later.","affected":[{"fixed":"0.81.0","introduced":"0.63.0"}],"component":"streamlit","cve_ids":["CVE-2023-27494"],"ecosystem":"PyPI","epss":0.0041,"exploited":false,"fixed_versions":["0.81.0"],"ghsa_id":"GHSA-9c6g-qpgj-rvxw","id":"tcs_01M5KFAF1RCC4C01518ZWM9D1Y","modified_at":"2024-10-28T14:44:06.146639Z","published_at":"2023-03-17T14:43:03Z","references":["https://osv.dev/vulnerability/GHSA-9c6g-qpgj-rvxw","https://github.com/streamlit/streamlit/security/advisories/GHSA-9c6g-qpgj-rvxw","https://nvd.nist.gov/vuln/detail/CVE-2023-27494","https://github.com/streamlit/streamlit/commit/afcf880c60e5d7538936cc2d9721b9e1bc02b075","https://github.com/pypa/advisory-database/tree/main/vulns/streamlit/PYSEC-2023-50.yaml","https://github.com/streamlit/streamlit"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-9c6g-qpgj-rvxw","url":"https://osv.dev/vulnerability/GHSA-9c6g-qpgj-rvxw"}],"summary":"Streamlit publishes previously-patched Cross-site Scripting vulnerability"}