{"action":"Upgrade com.yetanalytics:lrs to 1.2.17 or later.","affected":[{"fixed":"1.2.17","introduced":"0"}],"component":"com.yetanalytics:lrs","cve_ids":["CVE-2024-26140"],"ecosystem":"Maven","epss":0.00447,"exploited":false,"fixed_versions":["1.2.17"],"ghsa_id":"GHSA-7rw2-3hhp-rc46","id":"tcs_01M5N8K5DVHDD0KY21F3BCVYGJ","modified_at":"2026-09-10T03:50:05.430847348Z","published_at":"2024-02-21T00:24:56Z","references":["https://osv.dev/vulnerability/GHSA-7rw2-3hhp-rc46","https://github.com/yetanalytics/lrs/security/advisories/GHSA-7rw2-3hhp-rc46","https://nvd.nist.gov/vuln/detail/CVE-2024-26140","https://github.com/yetanalytics/lrs/commit/d7f4883bc2252337d25e8bba2c7f9d172f5b0621","https://clojars.org/com.yetanalytics/lrs/versions/1.2.17","https://github.com/yetanalytics/lrs","https://github.com/yetanalytics/lrs/releases/tag/v1.2.17","https://github.com/yetanalytics/lrsql/releases/tag/v0.7.5"],"severity":{"label":"medium","score":4.6},"sources":[{"source":"osv","source_id":"GHSA-7rw2-3hhp-rc46","url":"https://osv.dev/vulnerability/GHSA-7rw2-3hhp-rc46"}],"summary":"Cross-site Scripting Vulnerability in Statement Browser"}