{"action":"Upgrade agents to 0.3.10 or later.","affected":[{"fixed":"0.3.10","introduced":"0"}],"component":"agents","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["0.3.10"],"ghsa_id":"GHSA-w5cr-2qhr-jqc5","id":"tcs_01M5KGE07J73FYQC8Y7CHE5CZK","modified_at":"2026-02-13T21:10:51.108736Z","published_at":"2026-02-13T21:04:00Z","references":["https://osv.dev/vulnerability/GHSA-w5cr-2qhr-jqc5","https://github.com/cloudflare/agents/security/advisories/GHSA-w5cr-2qhr-jqc5","https://github.com/cloudflare/agents/pull/841","https://github.com/cloudflare/agents/commit/3f490d045844e4884db741afbb66ca1fe65d4093","https://github.com/cloudflare/agents"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-w5cr-2qhr-jqc5","url":"https://osv.dev/vulnerability/GHSA-w5cr-2qhr-jqc5"}],"summary":"Cloudflare Agents has a Reflected Cross-Site Scripting (XSS) vulnerability in AI Playground site"}