{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"6.4-feature13197"}],"component":"org.silverpeas.core:silverpeas-core-web","cve_ids":["CVE-2026-30139"],"ecosystem":"Maven","epss":0.00188,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-vmj7-7xmm-4349","id":"tcs_01M5N9EB6JDBFZVVFQPTN4NZ4W","modified_at":"2026-05-05T16:26:30.647838Z","published_at":"2026-04-22T18:31:44Z","references":["https://osv.dev/vulnerability/GHSA-vmj7-7xmm-4349","https://nvd.nist.gov/vuln/detail/CVE-2026-30139","https://github.com/Silverpeas/Silverpeas-Core/pull/1421","https://github.com/Silverpeas/Silverpeas-Core/commit/7b4bacc80d11ab60423bdc6eb69e0176e9c27fc7","https://github.com/Silverpeas/Silverpeas-Core","https://github.com/bodd1593/CVEs-huyle/tree/main/CVE-2026-30139"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-vmj7-7xmm-4349#Maven/org.silverpeas.core:silverpeas-core-web","url":"https://osv.dev/vulnerability/GHSA-vmj7-7xmm-4349"}],"summary":"Silverpeas Core has a reflected cross-site scripting vulnerability"}