{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"github.com/zitadel/zitadel","cve_ids":["CVE-2024-41953"],"ecosystem":"Go","epss":0.0065,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-v333-7h2p-5fhv","id":"tcs_01M5KG4EY020HTTC372F3NXKMS","modified_at":"2024-08-06T22:27:06.659093Z","published_at":"2024-08-06T22:03:16Z","references":["https://osv.dev/vulnerability/GO-2024-3015","https://github.com/zitadel/zitadel/security/advisories/GHSA-v333-7h2p-5fhv","https://nvd.nist.gov/vuln/detail/CVE-2024-41953","https://github.com/zitadel/zitadel/commit/0e1f99e987b5851caec45a72660fe9f67e425747","https://github.com/zitadel/zitadel/commit/38da602ee1cfc35c0d7918c298fbfc3f3674133b","https://github.com/zitadel/zitadel/commit/4b59cac67bb89c1f3f84a2041dd273d11151d29f","https://github.com/zitadel/zitadel/commit/c1a3fc72dde16e987d8a09aa291e7c2edfc928f7","https://github.com/zitadel/zitadel/commit/c353f82f89c6982c0888c6763363296cf4263cb2","https://github.com/zitadel/zitadel/commit/d04ac6df8f2f0243e649b802a8bfa6176cef0923","https://github.com/zitadel/zitadel/commit/f846616a3f022e88e3ea8cea05d3254ad86f1615","https://github.com/zitadel/zitadel/releases/tag/v2.52.3","https://github.com/zitadel/zitadel/releases/tag/v2.53.9","https://github.com/zitadel/zitadel/releases/tag/v2.54.8","https://github.com/zitadel/zitadel/releases/tag/v2.55.5","https://github.com/zitadel/zitadel/releases/tag/v2.56.2","https://github.com/zitadel/zitadel/releases/tag/v2.57.1","https://github.com/zitadel/zitadel/releases/tag/v2.58.1"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-3015","url":"https://osv.dev/vulnerability/GO-2024-3015"}],"summary":"ZITADEL has improper HTML sanitization in emails and Console UI in github.com/zitadel/zitadel"}