{"action":"Upgrade github.com/dutchcoders/transfer.sh to 1.2.4 or later.","affected":[{"fixed":"1.2.4","introduced":"0"}],"component":"github.com/dutchcoders/transfer.sh","cve_ids":["CVE-2021-33496"],"ecosystem":"Go","epss":0.01009,"exploited":false,"fixed_versions":["1.2.4"],"ghsa_id":"GHSA-w3jx-wv97-67ph","id":"tcs_01M5KFQ0A5DABK8ENE5M35P3K0","modified_at":"2024-08-21T16:28:41.891080Z","published_at":"2021-06-29T21:25:27Z","references":["https://osv.dev/vulnerability/GHSA-w3jx-wv97-67ph","https://nvd.nist.gov/vuln/detail/CVE-2021-33496","https://github.com/dutchcoders/transfer.sh/pull/373","https://github.com/dutchcoders/transfer.sh/commit/9df18fdc69de2e71f30d8c1e6bfab2fda2e52eb4","https://github.com/dutchcoders/transfer.sh/releases/tag/v1.2.4","https://vuln.ryotak.me/advisories/43"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-w3jx-wv97-67ph","url":"https://osv.dev/vulnerability/GHSA-w3jx-wv97-67ph"}],"summary":"Cross-site scripting in Dutchcoders transfer.sh"}