{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"chuanhuchatgpt","cve_ids":["CVE-2024-6035"],"ecosystem":"PyPI","epss":0.00371,"exploited":false,"fixed_versions":[],"id":"tcs_01M5KGNB8XBK2T3ESTD48P2TTM","modified_at":"2024-07-12T21:57:31.199728Z","published_at":"2024-07-11T11:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2024-61","https://huntr.com/bounties/e4e8da71-53a9-4540-8d70-6b670b076987"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"PYSEC-2024-61","url":"https://osv.dev/vulnerability/PYSEC-2024-61"}],"summary":"A Stored Cross-Site Scripting (XSS) vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240410. This vulnerability allows an attacker to inject malicious JavaScript code into the chat history"}