{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"4.0.2"}],"component":"django-markdownx","cve_ids":["CVE-2024-2319"],"ecosystem":"PyPI","epss":0.00389,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-fvx8-79hx-x82f","id":"tcs_01M5KGRRG5RAJ48N02SY43AH4Z","modified_at":"2026-07-07T17:46:34.904324481Z","published_at":"2026-07-07T11:45:34.644243Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1299","https://nvd.nist.gov/vuln/detail/CVE-2024-2319","https://github.com/neutronX/django-markdownx","https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-vulnerability-django-markdownx","https://pypi.org/project/django-markdownx","https://github.com/advisories/GHSA-fvx8-79hx-x82f"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"PYSEC-2026-1299","url":"https://osv.dev/vulnerability/PYSEC-2026-1299"}],"summary":"Django MarkdownX Cross-Site Scripting (XSS) vulnerability"}