{"action":"Upgrade github.com/k1LoW/mo to 0.18.5 or later.","affected":[{"fixed":"0.18.5","introduced":"0"}],"component":"github.com/k1LoW/mo","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["0.18.5"],"ghsa_id":"GHSA-vccx-p757-pv6h","id":"tcs_01M5KFNZ96THMEHQEMV2MYN9P4","modified_at":"2026-03-23T18:56:25.781957Z","published_at":"2026-03-18T20:17:12Z","references":["https://osv.dev/vulnerability/GHSA-vccx-p757-pv6h","https://github.com/k1LoW/mo/security/advisories/GHSA-vccx-p757-pv6h","https://github.com/k1LoW/mo"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-vccx-p757-pv6h","url":"https://osv.dev/vulnerability/GHSA-vccx-p757-pv6h"}],"summary":"mo has a XSS via inline SVG script tags in Markdown rendering"}