{"action":"No fix published. Pin and monitor.","affected":[],"component":"codechecker-api","cve_ids":["CVE-2021-44217"],"ecosystem":"PyPI","epss":0.01647,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-fxmx-pfm2-85m2","id":"tcs_01M5KGHWSKC5KT8CS5NB71BNQT","modified_at":"2026-07-06T08:11:11.912089942Z","published_at":"2022-01-18T15:15:08.253Z","references":["https://osv.dev/vulnerability/PYSEC-2022-43181","https://github.com/Ericsson/codechecker/releases","https://user-images.githubusercontent.com/9525971/142965091-e118b012-a7fc-4c2f-ad0c-80aeed6f7ec9.png","https://codechecker-demo.eastus.cloudapp.azure.com/","https://github.com/Ericsson/codechecker/pull/3549","https://github.com/Hyperkopite/CVE-2021-44217/blob/main/README.md"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"PYSEC-2022-43181","url":"https://osv.dev/vulnerability/PYSEC-2022-43181"}],"summary":"In Ericsson CodeChecker through 6.18.0, a Stored Cross-site scripting (XSS) vulnerability in the comments component of the reports viewer allows remote attackers to inject arbitrary web script or HTML"}