{"action":"Upgrade gforge to 4.7~rc2-7lenny2 or later.","affected":[{"fixed":"4.7~rc2-7lenny2","introduced":"0"}],"component":"gforge","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:5.0","exploited":false,"fixed_versions":["4.7~rc2-7lenny2"],"id":"tcs_01M5NYJ88WK68PF8A2J822H1BP","modified_at":"2026-03-09T01:21:27.209004Z","published_at":"2009-11-21T00:00:00Z","references":["https://osv.dev/vulnerability/DSA-1937-1"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DSA-1937-1#Debian:5.0/gforge","url":"https://osv.dev/vulnerability/DSA-1937-1"}],"summary":"gforge - cross-site scripting"}