{"id":"GHSA-4mvm-xh8j-fv27","summary":"Duplicate Advisory: govuk_tech_docs vulnerable to unescaped HTML on search results page","details":"### Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-x2xw-hw8g-6773. This link is maintained to preserve external references.\n\n### Original Description\n versions from 2.0.2 to before 3.3.1 are vulnerable to a cross-site scripting vulnerability. Malicious JavaScript may be executed in the user's browser if a malicious search result is displayed on the search page.\n\n","modified":"2026-09-10T03:50:04.883622773Z","published":"2024-01-04T21:30:24Z","withdrawn":"2024-01-05T15:28:17Z","database_specific":{"cwe_ids":["CWE-79"],"severity":"LOW","github_reviewed":true,"github_reviewed_at":"2024-01-05T15:28:17Z","nvd_published_at":"2024-01-04T21:15:09Z"},"references":[{"type":"WEB","url":"https://github.com/alphagov/tech-docs-gem/security/advisories/GHSA-x2xw-hw8g-6773"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-22048"},{"type":"WEB","url":"https://github.com/alphagov/tech-docs-gem/pull/323"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-x2xw-hw8g-6773"},{"type":"WEB","url":"https://github.com/alphagov/tech-docs-gem/releases/tag/v3.3.1"},{"type":"WEB","url":"https://vulncheck.com/advisories/vc-advisory-GHSA-x2xw-hw8g-6773"}],"affected":[{"package":{"name":"govuk_tech_docs","ecosystem":"RubyGems","purl":"pkg:gem/govuk_tech_docs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0.2"}]}],"versions":["2.0.10","2.0.11","2.0.12","2.0.13","2.0.2","2.0.3","2.0.4","2.0.5","2.0.6","2.0.7","2.0.8","2.0.9","2.1.0","2.1.1","2.2.0","2.2.1","2.2.2","2.3.0","2.4.0","2.4.1","2.4.2","2.4.3","3.0.0","3.0.1","3.1.0","3.2.0","3.2.1","3.3.0","3.3.1","3.4.0","3.4.5","3.5.0","4.0.0","4.1.0","4.1.1","4.1.2","4.2.0","4.3.0","4.3.1","4.4.0","5.0.0","5.0.1","5.0.2","5.1.0","5.1.1","5.2.0","5.2.1","5.2.2","6.0.0","6.0.0.beta","6.0.1","6.1.0","6.2.0","6.2.1","6.2.2","6.2.3","6.2.4","6.3.0","6.3.0.beta","6.4.0.beta"],"database_specific":{"last_known_affected_version_range":"\u003c 3.3.1","source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/01/GHSA-4mvm-xh8j-fv27/GHSA-4mvm-xh8j-fv27.json"}}],"schema_version":"1.9.0"}