{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"4.0.2"}],"component":"django-markdownx","cve_ids":["CVE-2024-2319"],"ecosystem":"PyPI","epss":0.00389,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-fvx8-79hx-x82f","id":"tcs_01M5KFG6DNMPDVZZ1XWMN2ERH8","modified_at":"2026-07-07T17:57:01.437591091Z","published_at":"2024-03-08T15:30:32Z","references":["https://osv.dev/vulnerability/GHSA-fvx8-79hx-x82f","https://nvd.nist.gov/vuln/detail/CVE-2024-2319","https://github.com/neutronX/django-markdownx","https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-vulnerability-django-markdownx"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-fvx8-79hx-x82f","url":"https://osv.dev/vulnerability/GHSA-fvx8-79hx-x82f"}],"summary":"Django MarkdownX Cross-Site Scripting (XSS) vulnerability"}