Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-kuf5-26ar-h7fq
Vulnerability ID VCID-kuf5-26ar-h7fq
Aliases GHSA-4mvm-xh8j-fv27
Summary Duplicate Advisory: govuk_tech_docs vulnerable to unescaped HTML on search results page
Status Published
Exploitability 0.5
Weighted Severity 2.7
Risk 1.4
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
System Score Found at
cvssv3.1_qr LOW https://github.com/advisories/GHSA-4mvm-xh8j-fv27
generic_textual LOW https://github.com/advisories/GHSA-x2xw-hw8g-6773
generic_textual LOW https://github.com/alphagov/tech-docs-gem/pull/323
generic_textual LOW https://github.com/alphagov/tech-docs-gem/releases/tag/v3.3.1
generic_textual LOW https://github.com/alphagov/tech-docs-gem/security/advisories/GHSA-x2xw-hw8g-6773
generic_textual LOW https://nvd.nist.gov/vuln/detail/CVE-2024-22048
generic_textual LOW https://vulncheck.com/advisories/vc-advisory-GHSA-x2xw-hw8g-6773
Reference id Reference type URL
https://github.com/alphagov/tech-docs-gem/pull/323
https://github.com/alphagov/tech-docs-gem/releases/tag/v3.3.1
CVE-2024-22048 https://nvd.nist.gov/vuln/detail/CVE-2024-22048
GHSA-4mvm-xh8j-fv27 https://github.com/advisories/GHSA-4mvm-xh8j-fv27
GHSA-x2xw-hw8g-6773 https://github.com/advisories/GHSA-x2xw-hw8g-6773
GHSA-x2xw-hw8g-6773 https://github.com/alphagov/tech-docs-gem/security/advisories/GHSA-x2xw-hw8g-6773
vc-advisory-GHSA-x2xw-hw8g-6773 https://vulncheck.com/advisories/vc-advisory-GHSA-x2xw-hw8g-6773
No exploits are available.

No EPSS data available for this vulnerability.

Date Actor Action Source VulnerableCode Version
2026-05-31T01:01:44.338045+00:00 GHSA Importer Import https://github.com/advisories/GHSA-4mvm-xh8j-fv27 38.6.0