-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
GoGo| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/zincsearch/zincsearch | go | >= 0.1.9, < 0.3.2 | 0.3.2 |
| github.com/zinclabs/zinc | go | >= 0.1.9, < 0.3.2 | 0.3.2 |
Miggo AIRoot Cause AnalysisThe commit diff shows the vulnerability was patched by adding HTML escaping to props.row.name in Template.vue's deletion dialog. The unescaped insertion of user-controlled template names into HTML markup via the confirmation message (props.row.name) directly enabled XSS. The User.vue change was a related defensive fix but not the primary vulnerability vector described in CVE-2022-32172, which specifically references template deletion as the trigger.
Ongoing coverage of React2Shell