{"action":"Upgrade net.bull.javamelody:javamelody-core to 1.61.0 or later.","affected":[{"fixed":"1.61.0","introduced":"0"}],"component":"net.bull.javamelody:javamelody-core","cve_ids":["CVE-2016-1000273"],"ecosystem":"Maven","exploited":false,"fixed_versions":["1.61.0"],"ghsa_id":"GHSA-cqhr-jqvc-qw9p","id":"tcs_01M5N8T11AV5CRTDS2E7R6C791","modified_at":"2026-09-10T03:49:44.760738855Z","published_at":"2022-07-20T01:36:35Z","references":["https://osv.dev/vulnerability/GHSA-cqhr-jqvc-qw9p","https://github.com/javamelody/javamelody/commit/e0497c1980acebd257d3da78dfde29ae9bdffdf6","https://github.com/javamelody/javamelody","https://github.com/javamelody/javamelody/wiki/ReleaseNotes#1620"],"severity":{"label":"critical","score":10},"sources":[{"source":"osv","source_id":"GHSA-cqhr-jqvc-qw9p","url":"https://osv.dev/vulnerability/GHSA-cqhr-jqvc-qw9p"}],"summary":"Java Melody vulnerable to cross-site scripting"}