{"action":"Upgrade org.xwiki.platform:xwiki-platform-flamingo-theme-ui to the fixed version for your line (see fixed_versions).","affected":[{"fixed":"13.10.10","introduced":"6.2.4"},{"fixed":"14.4.6","introduced":"14.0"},{"fixed":"14.9-rc-1","introduced":"14.5"}],"component":"org.xwiki.platform:xwiki-platform-flamingo-theme-ui","cve_ids":["CVE-2023-26477"],"ecosystem":"Maven","epss":0.74757,"exploited":false,"fixed_versions":["13.10.10","14.4.6","14.9-rc-1"],"ghsa_id":"GHSA-x2qm-r4wx-8gpg","id":"tcs_01M5N9HHYHHCYTQV8Z1RPG2ZQK","modified_at":"2026-09-10T03:49:53.300130596Z","published_at":"2023-03-03T22:51:02Z","references":["https://osv.dev/vulnerability/GHSA-x2qm-r4wx-8gpg","https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-x2qm-r4wx-8gpg","https://nvd.nist.gov/vuln/detail/CVE-2023-26477","https://github.com/xwiki/xwiki-platform/commit/ea2e615f50a918802fd60b09ec87aa04bc6ea8e2#diff-e2153fa59f9d92ef67b0afbf27984bd17170921a3b558fac227160003d0dfd2aR283-R284","https://github.com/xwiki/xwiki-platform","https://jira.xwiki.org/browse/XWIKI-19757"],"severity":{"label":"critical","score":10},"sources":[{"source":"osv","source_id":"GHSA-x2qm-r4wx-8gpg","url":"https://osv.dev/vulnerability/GHSA-x2qm-r4wx-8gpg"}],"summary":"org.xwiki.platform:xwiki-platform-flamingo-theme-ui Eval Injection vulnerability"}