{"items":[{"id":"CVE-2023-6199","published":"2023-11-20T22:21:04.992Z","updated":"2025-05-19T14:02:54.810Z","title":"Book Stack v23.10.2 - LFR via Blind SSRF","severity":"MEDIUM","score":6.5,"vendor":"BookStack","product":"BookStack","kev":false,"epss":0.01381,"kevAdded":null},{"id":"CVE-2022-40690","published":"2022-10-24T00:00:00.000Z","updated":"2025-05-07T14:12:25.210Z","title":"Cross-site scripting vulnerability in BookStack versions prior to v22.09 allows a remote authenticated attacker to inject an arbitrary script.","severity":"MEDIUM","score":5.4,"vendor":"BookStack","product":"BookStack","kev":false,"epss":0.00892,"kevAdded":null}]}