{"id":"AZL-110336","summary":"CVE-2025-11687 affecting package gi-docgen 2024.1-4","details":"A flaw was found in the gi-docgen. This vulnerability allows arbitrary JavaScript execution in the context of the page — enabling DOM access, session cookie theft and other client-side attacks — via a crafted URL that supplies a malicious value to the q GET parameter (reflected DOM XSS).","modified":"2026-10-25T05:33:20Z","published":"2026-01-26T20:16:07Z","upstream":["CVE-2025-11687"],"references":[{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11687"}],"affected":[{"package":{"name":"gi-docgen","ecosystem":"Azure Linux:3","purl":"pkg:rpm/azure-linux/gi-docgen"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2024.1-4"}]}],"database_specific":{"source":"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-110336.json"}}],"schema_version":"1.9.0"}