{"action":"Upgrade prowler-cloud to 5.37.0 or later.","affected":[{"fixed":"5.37.0","introduced":"0"}],"component":"prowler-cloud","cve_ids":["CVE-2026-73262"],"ecosystem":"PyPI","epss":0.00298,"exploited":false,"fixed_versions":["5.37.0"],"ghsa_id":"GHSA-c2jg-2778-ggm4","id":"tcs_01M5KFBY9WEJH4ZM94AFEB5T8F","modified_at":"2026-09-10T12:25:53.102804611Z","published_at":"2026-09-08T18:09:25Z","references":["https://osv.dev/vulnerability/GHSA-c2jg-2778-ggm4","https://github.com/prowler-cloud/prowler/security/advisories/GHSA-c2jg-2778-ggm4","https://nvd.nist.gov/vuln/detail/CVE-2026-73262","https://github.com/prowler-cloud/prowler/pull/12221","https://github.com/prowler-cloud/prowler/commit/6db407ed3c17d4c73a8f619fdb30580c8465027f","https://github.com/prowler-cloud/prowler","https://github.com/prowler-cloud/prowler/releases/tag/5.37.0"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-c2jg-2778-ggm4#PyPI/prowler-cloud","url":"https://osv.dev/vulnerability/GHSA-c2jg-2778-ggm4"}],"summary":"Prowler: Stored XSS in HTML reports through unescaped cloud resource tags"}