{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"23.0","last_affected":"23.3"}],"component":"org.sakaiproject.kernel:sakai-kernel-impl","cve_ids":["CVE-2026-54049"],"ecosystem":"Maven","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-w2x5-gv52-9ccv","id":"tcs_01M5N9F6V4MP5VFCSAZRDFRVG2","modified_at":"2026-08-24T19:56:00.541458Z","published_at":"2026-08-24T19:37:53Z","references":["https://osv.dev/vulnerability/GHSA-w2x5-gv52-9ccv","https://github.com/sakaiproject/sakai/security/advisories/GHSA-w2x5-gv52-9ccv","https://github.com/sakaiproject/sakai/commit/2696b4b48cbef2e81512f52f84f7477adff78b27","https://github.com/sakaiproject/sakai","https://github.com/sakaiproject/sakai/releases/tag/23.5"],"severity":{"label":"high","score":8.7},"sources":[{"source":"osv","source_id":"GHSA-w2x5-gv52-9ccv#Maven/org.sakaiproject.kernel:sakai-kernel-impl","url":"https://osv.dev/vulnerability/GHSA-w2x5-gv52-9ccv"}],"summary":"Sakai Conversations has a Stored XSS Issue"}