{"action":"Upgrade teler.app to 0.0.0-20221203202318-20f59eda2420 or later.","affected":[{"fixed":"2.0.0-rc.4","introduced":"2.0.0-rc"},{"fixed":"2.0.0-dev.2","introduced":"2.0.0-dev"},{"fixed":"0.0.0-20221203202318-20f59eda2420","introduced":"0.0.0-20220625162531-2289e90590a9"},{"fixed":"1.2.3-0.20221203202318-20f59eda2420","introduced":"1.2.3-0.20220625162531-2289e90590a9"}],"component":"teler.app","cve_ids":["CVE-2022-23466"],"ecosystem":"Go","epss":0.00417,"exploited":false,"fixed_versions":["2.0.0-rc.4","2.0.0-dev.2","0.0.0-20221203202318-20f59eda2420","1.2.3-0.20221203202318-20f59eda2420"],"ghsa_id":"GHSA-xr7p-8q82-878q","id":"tcs_01M5KFSNJFQCJ1CDF6GC27ZYEB","modified_at":"2025-07-08T19:39:18Z","published_at":"2022-12-06T15:36:15Z","references":["https://osv.dev/vulnerability/GHSA-xr7p-8q82-878q","https://github.com/kitabisa/teler/security/advisories/GHSA-xr7p-8q82-878q","https://nvd.nist.gov/vuln/detail/CVE-2022-23466","https://github.com/kitabisa/teler/commit/20f59eda2420ac64e29f199a61230a0abc875e8e","https://github.com/kitabisa/teler"],"severity":{"label":"low","score":3.1},"sources":[{"source":"osv","source_id":"GHSA-xr7p-8q82-878q","url":"https://osv.dev/vulnerability/GHSA-xr7p-8q82-878q"}],"summary":"teler dashboard vulnerable to DOM-based cross-site scripting (XSS)"}