CVE-2020-23986

    Dashboard / Vulnerabilities / CVE-2020-23986

    CVE-2020-23986

    Published: 6 Jan 2022Last Modified: 9 Jul 2026

    Summary:

    Details: Github Read Me Stats commit 3c7220e4f7144f6cb068fd433c774f6db47ccb95 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the function renderError.

    References: https://github.com/anuraghazra/github-readme-stats/pull/255

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- dc8852dd6ba0b5f86de0e4a13a031c30dcbd20fc
    Fixed -None

    Affected versions

    1.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2020-23986 | CVE-DB