{"action":"Upgrade invenio-communities to 2.8.11 or later.","affected":[{"fixed":"7.8.0","introduced":"5.0.0"},{"fixed":"4.2.2","introduced":"3.0.0"},{"fixed":"2.8.11","introduced":"0"}],"component":"invenio-communities","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["7.8.0","4.2.2","2.8.11"],"ghsa_id":"GHSA-hjx6-f647-mvf9","id":"tcs_01M5KFKYVBGS37SNBC6NJZSRPD","modified_at":"2024-11-29T05:33:56.274697Z","published_at":"2024-06-12T19:43:04Z","references":["https://osv.dev/vulnerability/GHSA-hjx6-f647-mvf9","https://github.com/inveniosoftware/invenio-communities/security/advisories/GHSA-hjx6-f647-mvf9","https://github.com/inveniosoftware/invenio-communities/commit/4424dd5112818992b82ae42d4c4f89089502b35f","https://github.com/inveniosoftware/invenio-communities/commit/6a47db9404c51134634b3905f62f612b4a976698","https://github.com/inveniosoftware/invenio-communities/commit/817b8208f5ce262f45eab32832d90b80dc7d3fce","https://github.com/inveniosoftware/invenio-communities/commit/b89442c9d57421a88dd0aa89a404ba89d1a22cac","https://github.com/inveniosoftware/invenio-communities"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-hjx6-f647-mvf9","url":"https://osv.dev/vulnerability/GHSA-hjx6-f647-mvf9"}],"summary":"Invenio-Communities has a Cross-Site Scripting (XSS) vulnerability in React components"}