{"action":"Upgrade github.com/dutchcoders/transfer.sh to 1.2.4 or later.","affected":[{"fixed":"1.2.4","introduced":"0"}],"component":"github.com/dutchcoders/transfer.sh","cve_ids":["CVE-2021-33496"],"ecosystem":"Go","epss":0.01009,"exploited":false,"fixed_versions":["1.2.4"],"ghsa_id":"GHSA-w3jx-wv97-67ph","id":"tcs_01M5KFXAT8PHJHXX2YPSZ9X3ES","modified_at":"2026-03-03T04:51:03.924304Z","published_at":"2024-08-21T16:03:21Z","references":["https://osv.dev/vulnerability/GO-2022-0924","https://github.com/advisories/GHSA-w3jx-wv97-67ph","https://nvd.nist.gov/vuln/detail/CVE-2021-33496","https://github.com/dutchcoders/transfer.sh/commit/9df18fdc69de2e71f30d8c1e6bfab2fda2e52eb4","https://github.com/dutchcoders/transfer.sh/pull/373","https://github.com/dutchcoders/transfer.sh/releases/tag/v1.2.4","https://vuln.ryotak.me/advisories/43"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2022-0924","url":"https://osv.dev/vulnerability/GO-2022-0924"}],"summary":"Cross-site scripting in Dutchcoders transfer.sh in github.com/dutchcoders/transfer.sh"}