CVE-2024-22048: Gov.uk Govuk Tech Docs

Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days.

govuk_tech_docs versions from 2.0.2 to before 3.3.1 are vulnerable to a cross-site scripting vulnerability. Malicious JavaScript may be executed in the user's browser if a malicious search result is displayed on the search page.

Affected products

• Gov.uk Govuk Tech Docs: from 2.0.2, before 3.3.1 (fixed in 3.3.1)

Published 2024-01-04. Last modified 2026-07-14.