{"action":"Upgrade github.com/microcosm-cc/bluemonday to 1.0.16 or later.","affected":[{"fixed":"1.0.16","introduced":"0"}],"component":"github.com/microcosm-cc/bluemonday","cve_ids":["CVE-2021-42576"],"ecosystem":"Go","epss":0.01564,"exploited":false,"fixed_versions":["1.0.16"],"ghsa_id":"GHSA-x95h-979x-cf3j","id":"tcs_01M5KFWAA8PJQSDYZKXGJEHD2F","modified_at":"2024-05-20T16:03:47Z","published_at":"2022-08-15T18:02:24Z","references":["https://osv.dev/vulnerability/GO-2022-0588","https://github.com/microcosm-cc/bluemonday/commit/c788a2a4d42e081ad54a31368478820bb4a42fb4","https://docs.google.com/document/d/11SoX296sMS0XoQiQbpxc5pNxSdbJKDJkm5BDv0zrX50/"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2022-0588","url":"https://osv.dev/vulnerability/GO-2022-0588"}],"summary":"Cross-site scripting via leaked style elements in github.com/microcosm-cc/bluemonday"}