~ / search / GHSA-55vm-3vq3-4jpc

GHSA-55vm-3vq3-4jpc

Answer vulnerable to Cross-site Scripting

Source: GitHub Advisory Database (reviewed) Moderate CVE-2023-1240

Packages

EcosystemPackageAffectedFixed in
Go github.com/answerdev/answer < 1.0.6 1.0.6

Details

As written in the advisory (Markdown source, shown as plain text).

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

References

External links from the advisory. They lead to third-party sites.