{"action":"Upgrade red-dashboard to 0.1.7a or later.","affected":[{"fixed":"0.1.7a","introduced":"0"}],"component":"red-dashboard","cve_ids":["CVE-2020-26249"],"ecosystem":"PyPI","epss":0.01303,"exploited":false,"fixed_versions":["0.1.7a"],"ghsa_id":"GHSA-hm45-mgqm-gjm4","id":"tcs_01M5KFM05EX6BZARTPJRS1M95K","modified_at":"2026-07-08T05:59:35.567384290Z","published_at":"2020-12-08T23:55:54Z","references":["https://osv.dev/vulnerability/GHSA-hm45-mgqm-gjm4","https://github.com/Cog-Creators/Red-Dashboard/security/advisories/GHSA-hm45-mgqm-gjm4","https://nvd.nist.gov/vuln/detail/CVE-2020-26249","https://github.com/Cog-Creators/Red-Dashboard/commit/99d88b840674674166ce005b784ae8e31e955ab1","https://github.com/Cog-Creators/Red-Dashboard/commit/a6b9785338003ec87fb75305e7d1cc2d40c7ab91","https://github.com/Cog-Creators/Red-Dashboard","https://github.com/pypa/advisory-database/tree/main/vulns/red-dashboard/PYSEC-2020-98.yaml","https://pypi.org/project/Red-Dashboard"],"severity":{"label":"high","score":7.7},"sources":[{"source":"osv","source_id":"GHSA-hm45-mgqm-gjm4","url":"https://osv.dev/vulnerability/GHSA-hm45-mgqm-gjm4"}],"summary":"Remote Code Execution (RCE) Exploit on Cross Site Scripting (XSS) Vulnerability"}