{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"cabot","cve_ids":["CVE-2020-25449"],"ecosystem":"PyPI","epss":0.01147,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-8q2h-4mq6-396j","id":"tcs_01M5KG9WWK7MKRN77N758ZG3D8","modified_at":"2026-06-10T17:00:40.726293193Z","published_at":"2020-12-04T20:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2020-226","https://itsmeanonartist.tech/blogs/blog2.html","https://www.exploit-db.com/exploits/48791","https://www.exploitalert.com/view-details.html?id=36106","https://packetstormsecurity.com/files/159070/Cabot-0.11.12-Cross-Site-Scripting.html","https://github.com/advisories/GHSA-8q2h-4mq6-396j"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2020-226","url":"https://osv.dev/vulnerability/PYSEC-2020-226"}],"summary":"Cross Site Scripting (XSS) vulnerability in Arachnys Cabot 0.11.12 can be exploited via the Address column."}