{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"icingaweb2","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":[],"id":"tcs_01M5NHRQRG49H5BVQNQPVD42EM","modified_at":"2026-10-15T08:02:48.299709179Z","published_at":"2026-02-01T13:15:57.440Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2022-50942","https://security-tracker.debian.org/tracker/CVE-2022-50942"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2022-50942#Debian:13/icingaweb2","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2022-50942"}],"summary":"Incinga Web 2.8.2 contains a client-side cross-site scripting vulnerability that allows remote attackers to inject malicious script codes through the icinga.min.js file. Attackers can exploit the Even"}