{"action":"Upgrade github.com/rancher/norman to 0.0.0-20240207153100-3bb70b772b52 or later.","affected":[{"introduced":"0"}],"component":"github.com/rancher/norman","cve_ids":["CVE-2023-32193"],"ecosystem":"Go","epss":0.00467,"exploited":false,"fixed_versions":["0.0.0-20240207153100-3bb70b772b52"],"ghsa_id":"GHSA-r8f4-hv23-6qp6","id":"tcs_01M5KFMC4C2TDYVA4NKAPSSYXR","modified_at":"2026-09-10T03:50:09.894226961Z","published_at":"2024-02-08T18:45:49Z","references":["https://osv.dev/vulnerability/GHSA-r8f4-hv23-6qp6","https://github.com/rancher/norman/security/advisories/GHSA-r8f4-hv23-6qp6","https://nvd.nist.gov/vuln/detail/CVE-2023-32193","https://github.com/rancher/norman/commit/3bb70b772b52297feac64f5fdeb1b13c06c37e39","https://github.com/rancher/norman/commit/7b2b467995e6dfab6d4a5dee8dffc15033ae8269","https://github.com/rancher/norman/commit/a6a6cf5696088c32002953d36b75bdcc84f2399e","https://github.com/rancher/norman/commit/bd13c653293b9b5e0b37e8a6ccd1c3277f4623ed","https://github.com/rancher/norman/commit/cb54924f25c7666511a913cd41834299ef22dba4","https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-32193","https://github.com/rancher/norman"],"severity":{"label":"high","score":8.3},"sources":[{"source":"osv","source_id":"GHSA-r8f4-hv23-6qp6","url":"https://osv.dev/vulnerability/GHSA-r8f4-hv23-6qp6"}],"summary":"Norman API Cross-site Scripting Vulnerability"}