{"action":"Upgrade contentful to 1.12.4 or later.","affected":[{"fixed":"1.12.4","introduced":"0"}],"component":"contentful","cve_ids":["CVE-2020-13258"],"ecosystem":"PyPI","epss":0.02063,"exploited":false,"fixed_versions":["1.12.4"],"ghsa_id":"GHSA-g5j6-r3x9-gf2m","id":"tcs_01M5KFGW8VQ79XCPY435H8FKNX","modified_at":"2026-07-06T08:11:07.381728174Z","published_at":"2021-06-18T18:32:20Z","references":["https://osv.dev/vulnerability/GHSA-g5j6-r3x9-gf2m","https://nvd.nist.gov/vuln/detail/CVE-2020-13258","https://github.com/contentful/the-example-app.py/issues/44"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-g5j6-r3x9-gf2m","url":"https://osv.dev/vulnerability/GHSA-g5j6-r3x9-gf2m"}],"summary":"Cross-site scripting in Contentful"}