{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2024-09-19"}],"component":"chuanhuchatgpt","cve_ids":["CVE-2024-9107"],"ecosystem":"PyPI","epss":0.00566,"exploited":false,"fixed_versions":[],"id":"tcs_01M5KGPZJKVK6QCXDAHX9EY15E","modified_at":"2026-05-21T15:00:07.005560096Z","published_at":"2025-03-20T10:15:47.230Z","references":["https://osv.dev/vulnerability/PYSEC-2025-95","https://huntr.com/bounties/a2972c51-4780-4f60-afbf-a7a8ee4066ea"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"PYSEC-2025-95","url":"https://osv.dev/vulnerability/PYSEC-2025-95"}],"summary":"A stored cross-site scripting (XSS) vulnerability exists in the gaizhenbiao/chuanhuchatgpt repository, affecting version git 20b2e02. The vulnerability arises from improper sanitization of HTML tags i"}