{"action":"Upgrade netbox-data-flows to 1.5.1 or later.","affected":[{"fixed":"1.5.1","introduced":"0"}],"component":"netbox-data-flows","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["1.5.1"],"ghsa_id":"GHSA-v7qw-hx66-4w9x","id":"tcs_01M5KFZGSYHXFBN320R535VWXF","modified_at":"2026-05-07T22:48:01.017152Z","published_at":"2026-05-07T22:31:32Z","references":["https://osv.dev/vulnerability/GHSA-v7qw-hx66-4w9x","https://github.com/Alef-Burzmali/netbox-data-flows/security/advisories/GHSA-v7qw-hx66-4w9x","https://github.com/Alef-Burzmali/netbox-data-flows"],"severity":{"label":"high","score":8.7},"sources":[{"source":"osv","source_id":"GHSA-v7qw-hx66-4w9x","url":"https://osv.dev/vulnerability/GHSA-v7qw-hx66-4w9x"}],"summary":"netbox-data-flows has stored XSS in ObjectAlias names rendered inside DataFlow tables"}