CVE-2024-56361: lgsl Stored Cross-Site Scripting vulnerability

December 26, 2024 (updated December 27, 2024)

A stored cross-site scripting (XSS) vulnerability was identified in lgsl. The issue arises from improper sanitation of user input. Everyone who accesses this page will be affected by this attack.

References

github.com/advisories/GHSA-xx95-62h6-h7v3
github.com/tltneon/lgsl
github.com/tltneon/lgsl/commit/3fbd3bb581b636f7fd3ea0592c5f8df87d3a2843
github.com/tltneon/lgsl/security/advisories/GHSA-xx95-62h6-h7v3
nvd.nist.gov/vuln/detail/CVE-2024-56361

Code Behaviors & Features

Detect and mitigate CVE-2024-56361 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →