{"action":"Upgrade readthedocs-sphinx-search to 0.3.2 or later.","affected":[{"fixed":"0.3.2","introduced":"0"}],"component":"readthedocs-sphinx-search","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["0.3.2"],"ghsa_id":"GHSA-xgfm-fjx6-62mj","id":"tcs_01M5KG46TQJTST30Y6WWY5GVEA","modified_at":"2024-11-28T05:51:41.817588Z","published_at":"2024-01-16T20:48:16Z","references":["https://osv.dev/vulnerability/GHSA-xgfm-fjx6-62mj","https://github.com/readthedocs/readthedocs-sphinx-search/security/advisories/GHSA-xgfm-fjx6-62mj","https://github.com/readthedocs/readthedocs-sphinx-search/commit/8c6f6d01e88e72ef32ed0c220b6c19d1e1121c73","https://github.com/readthedocs/readthedocs-sphinx-search"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-xgfm-fjx6-62mj","url":"https://osv.dev/vulnerability/GHSA-xgfm-fjx6-62mj"}],"summary":"readthedocs-sphinx-search vulnerable to cross-site scripting when including search results from malicious projects"}