{"action":"Upgrade @tdurieux/anonymous_github to 2.3.0 or later.","affected":[{"fixed":"2.3.0","introduced":"2.2.0"}],"component":"@tdurieux/anonymous_github","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["2.3.0"],"ghsa_id":"GHSA-g485-8j3v-p6x8","id":"tcs_01M5KFPZGXGWB4ARKMQP1P2BTN","modified_at":"2026-05-05T18:47:42.324391Z","published_at":"2026-05-05T18:28:32Z","references":["https://osv.dev/vulnerability/GHSA-g485-8j3v-p6x8","https://github.com/tdurieux/anonymous_github/security/advisories/GHSA-g485-8j3v-p6x8","https://github.com/tdurieux/anonymous_github"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-g485-8j3v-p6x8","url":"https://osv.dev/vulnerability/GHSA-g485-8j3v-p6x8"}],"summary":"@tdurieux/anonymous_github Vulnerable to XSS via Unsanitized GitHub Repository Content Rendering in Anonymous GitHub Origin"}