{"action":"Upgrade knowledge-repo to 0.9.0 or later.","affected":[{"fixed":"0.9.0","introduced":"0"}],"component":"knowledge-repo","cve_ids":["CVE-2018-12104"],"ecosystem":"PyPI","epss":0.01274,"exploited":false,"fixed_versions":["0.9.0"],"ghsa_id":"GHSA-xmw7-848p-p95w","id":"tcs_01M5KG4EJK3ES6J1HQ9KWYYVE6","modified_at":"2024-09-27T18:24:41.834152Z","published_at":"2022-05-14T03:08:16Z","references":["https://osv.dev/vulnerability/GHSA-xmw7-848p-p95w","https://nvd.nist.gov/vuln/detail/CVE-2018-12104","https://github.com/airbnb/knowledge-repo/issues/254","https://github.com/airbnb/knowledge-repo/issues/431","https://github.com/airbnb/knowledge-repo/pull/558","https://github.com/airbnb/knowledge-repo/commit/f026ad2afea14e0ffc91f1aa0eaedcdc72c63167","https://github.com/airbnb/knowledge-repo","https://github.com/pypa/advisory-database/tree/main/vulns/knowledge-repo/PYSEC-2018-116.yaml","https://pypi.org/project/knowledge-repo","https://web.archive.org/web/20200227121013/http://www.securityfocus.com/bid/104487"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-xmw7-848p-p95w","url":"https://osv.dev/vulnerability/GHSA-xmw7-848p-p95w"}],"summary":"Airbnb Knowledge Repo XSS In Comments"}