{"action":"Upgrade github.com/microcosm-cc/bluemonday to 1.0.5 or later.","affected":[{"fixed":"1.0.5","introduced":"0"}],"component":"github.com/microcosm-cc/bluemonday","cve_ids":["CVE-2021-29272"],"ecosystem":"Go","epss":0.00929,"exploited":false,"fixed_versions":["1.0.5"],"ghsa_id":"GHSA-3x58-xr87-2fcj","id":"tcs_01M5KFWQTR8CYFC7ZB1HK42GHN","modified_at":"2024-05-20T16:03:47Z","published_at":"2021-05-18T21:07:37Z","references":["https://osv.dev/vulnerability/GO-2022-0762","https://github.com/microcosm-cc/bluemonday/commit/524f142fe46e945b7dcd291d7805c4b7dcf75bee","https://github.com/microcosm-cc/bluemonday/issues/111","https://github.com/microcosm-cc/bluemonday/releases/tag/v1.0.5"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2022-0762","url":"https://osv.dev/vulnerability/GO-2022-0762"}],"summary":"Cross-site scripting due to incorrect sanitization in github.com/microcosm-cc/bluemonday"}