{"action":"Upgrade contentful to 1.12.4 or later.","affected":[{"fixed":"1.12.4","introduced":"0"}],"component":"contentful","cve_ids":["CVE-2020-13258"],"ecosystem":"PyPI","epss":0.02063,"exploited":false,"fixed_versions":["1.12.4"],"ghsa_id":"GHSA-g5j6-r3x9-gf2m","id":"tcs_01M5KHCHJF5JFMVHZWVSHQYZ2D","modified_at":"2026-07-06T08:00:11.701015253Z","published_at":"2026-07-02T14:13:10.258627Z","references":["https://osv.dev/vulnerability/PYSEC-2026-626","https://nvd.nist.gov/vuln/detail/CVE-2020-13258","https://github.com/contentful/the-example-app.py/issues/44","https://pypi.org/project/contentful","https://github.com/advisories/GHSA-g5j6-r3x9-gf2m"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"PYSEC-2026-626","url":"https://osv.dev/vulnerability/PYSEC-2026-626"}],"summary":"Cross-site scripting in Contentful"}