{"action":"Upgrade io.jstach:jstachio to 1.0.1 or later.","affected":[{"fixed":"1.0.1","introduced":"0"}],"component":"io.jstach:jstachio","cve_ids":["CVE-2023-33962"],"ecosystem":"Maven","epss":0.00579,"exploited":false,"fixed_versions":["1.0.1"],"ghsa_id":"GHSA-gwxv-jv83-6qjr","id":"tcs_01M5N8Z6DFSS0K9DR9W8805ZKP","modified_at":"2024-02-16T08:24:50.926758Z","published_at":"2023-06-06T00:45:18Z","references":["https://osv.dev/vulnerability/GHSA-gwxv-jv83-6qjr","https://github.com/jstachio/jstachio/security/advisories/GHSA-gwxv-jv83-6qjr","https://nvd.nist.gov/vuln/detail/CVE-2023-33962","https://github.com/jstachio/jstachio/issues/157","https://github.com/jstachio/jstachio/pull/158","https://github.com/jstachio/jstachio/commit/7b2f78377d1284df14c580be762a25af5f8dcd66","https://github.com/jstachio/jstachio","https://github.com/jstachio/jstachio/releases/tag/v1.0.1"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-gwxv-jv83-6qjr","url":"https://osv.dev/vulnerability/GHSA-gwxv-jv83-6qjr"}],"summary":"JStachio XSS vulnerability: Unescaped single quotes"}