{
  "affected": [
    {
      "database_specific": {
        "last_known_affected_version_range": "\u003c 3.3.1"
      },
      "package": {
        "ecosystem": "RubyGems",
        "name": "govuk_tech_docs"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "2.0.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [],
  "database_specific": {
    "cwe_ids": [
      "CWE-79"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2024-01-05T15:28:17Z",
    "nvd_published_at": "2024-01-04T21:15:09Z",
    "severity": "LOW"
  },
  "details": "### Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-x2xw-hw8g-6773. This link is maintained to preserve external references.\n\n### Original Description\n versions from 2.0.2 to before 3.3.1 are vulnerable to a cross-site scripting vulnerability. Malicious JavaScript may be executed in the user\u0027s browser if a malicious search result is displayed on the search page.\n\n",
  "id": "GHSA-4mvm-xh8j-fv27",
  "modified": "2024-01-05T15:28:17Z",
  "published": "2024-01-04T21:30:24Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/alphagov/tech-docs-gem/security/advisories/GHSA-x2xw-hw8g-6773"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-22048"
    },
    {
      "type": "WEB",
      "url": "https://github.com/alphagov/tech-docs-gem/pull/323"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/advisories/GHSA-x2xw-hw8g-6773"
    },
    {
      "type": "WEB",
      "url": "https://github.com/alphagov/tech-docs-gem/releases/tag/v3.3.1"
    },
    {
      "type": "WEB",
      "url": "https://vulncheck.com/advisories/vc-advisory-GHSA-x2xw-hw8g-6773"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [],
  "summary": "Duplicate Advisory: govuk_tech_docs vulnerable to unescaped HTML on search results page",
  "withdrawn": "2024-01-05T15:28:17Z"
}