{"action":"Upgrade xml2rfc to 3.12.4 or later.","affected":[{"fixed":"3.12.4","introduced":"0"}],"component":"xml2rfc","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["3.12.4"],"ghsa_id":"GHSA-cf4q-4cqr-7g7w","id":"tcs_01M5KFCQTVTB1B381FXF47G2DD","modified_at":"2024-12-05T05:42:31.021439Z","published_at":"2022-04-22T20:25:53Z","references":["https://osv.dev/vulnerability/GHSA-cf4q-4cqr-7g7w","https://github.com/ietf-tools/xml2rfc/security/advisories/GHSA-cf4q-4cqr-7g7w","https://github.com/ietf-tools/xml2rfc"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-cf4q-4cqr-7g7w","url":"https://osv.dev/vulnerability/GHSA-cf4q-4cqr-7g7w"}],"summary":"SVG with embedded scripts can lead to cross-site scripting attacks in xml2rfc"}