{"id":"CGA-vr69-q2fc-gr5h","modified":"2026-07-17T19:23:37.800775291Z","published":"2026-06-29T18:34:35Z","upstream":["CVE-2024-21501","GHSA-rm97-x556-q36h"],"references":[{"type":"FIX","url":"https://github.com/apostrophecms/sanitize-html/commit/c5dbdf77fe8b836d3bf4554ea39edb45281ec0b4"},{"type":"FIX","url":"https://github.com/apostrophecms/sanitize-html/pull/650"},{"type":"WEB","url":"https://gist.github.com/Slonser/8b4d061abe6ee1b2e10c7242987674cf"},{"type":"WEB","url":"https://github.com/apostrophecms/apostrophe/discussions/4436"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4EB5JPYRCTS64EA5AMV3INHDPI6I4AW7/"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P4I5X6V3LYUNBMZ5YOW4BV427TH3IK4S/"},{"type":"WEB","url":"https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-6276557"},{"type":"WEB","url":"https://security.snyk.io/vuln/SNYK-JS-SANITIZEHTML-6256334"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/21xxx/CVE-2024-21501.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21501"}],"affected":[{"package":{"name":"py3.10-jupyterlab","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.10-jupyterlab?arch=x86_64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.1-r1"}]}],"ecosystem_specific":{"components":[{"component_version":"2.7.3","component_type":"npm","component_location":"/usr/lib/python3.10/site-packages/jupyterlab/tests/mock_packages/test_no_hyphens/yarn.lock","component_purl":"pkg:npm/sanitize-html@2.7.3","latest_event_status":"fixed","latest_event_timestamp":"2026-07-02T14:44:39Z","architecture":"x86_64","component_name":"sanitize-html"}]},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vr69-q2fc-gr5h.json"}},{"package":{"name":"py3.10-jupyterlab","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.10-jupyterlab?arch=x86_64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.1-r1"}]}],"ecosystem_specific":{"components":[{"component_type":"npm","component_location":"/usr/lib/python3.10/site-packages/jupyterlab/tests/mock_packages/test_no_hyphens/yarn.lock","component_purl":"pkg:npm/sanitize-html@2.7.3","latest_event_status":"fixed","latest_event_timestamp":"2026-07-02T14:44:39Z","architecture":"x86_64","component_name":"sanitize-html","component_version":"2.7.3"}]},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vr69-q2fc-gr5h.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P"}]}