{"action":"Upgrade dino-im to 0.4.2-1 or later.","affected":[{"fixed":"0.4.2-1","introduced":"0"}],"component":"dino-im","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["0.4.2-1"],"id":"tcs_01M5NJ0528XK63DMYFXB1GE0PA","modified_at":"2026-10-26T18:01:40.352591543Z","published_at":"2023-03-24T04:15:55.963Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2023-28686","https://security-tracker.debian.org/tracker/CVE-2023-28686"],"severity":{"label":"high","score":7.1},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2023-28686#Debian:13/dino-im","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2023-28686"}],"summary":"Dino before 0.2.3, 0.3.x before 0.3.2, and 0.4.x before 0.4.2 allows attackers to modify the personal bookmark store via a crafted message. The attacker can change the display of group chats or force"}