# Security advisory OG image template

A CVE card: the score as a ring dial in the severity colour, the title, the package and the vulnerable and fixed versions.

- Slug: `security-advisory`
- Preview (real render): https://shareglint.com/storage/template-previews/security-advisory.jpg
- Page: https://shareglint.com/en/templates/security-advisory

For security vendors, open-source maintainers and package registries announcing an advisory. The dial fills to the score clamped to 0–10 and prints the value as sent; without a `severity` the CVSS bands of the score pick one. The affected range is struck through in red and the fix shown in green. Wide frames put the dial on the right; square and vertical frames put it on top.

## Fields

Every field is optional. Long text shrinks to fit instead of overflowing; an image field takes a public URL that we fetch on our side.

| Field | Type | Description | Example |
|---|---|---|---|
| `title` | text | What the vulnerability lets an attacker do. (default: Security advisory) | Path traversal in archive extraction lets a crafted tarball write outside the target directory |
| `advisory_id` | text | CVE or GHSA identifier, e.g. CVE-2026-41872. | CVE-2026-41872 |
| `severity` | text | low, medium, high or critical; sets the dial colour. | critical |
| `score` | text | CVSS score from 0 to 10, e.g. 9.8. | 9.8 |
| `package` | text | Ecosystem and package, e.g. npm · tar-stream-lite. | npm · tar-stream-lite |
| `affected` | text | Vulnerable versions, e.g. < 4.2.1. | < 4.2.1 |
| `fixed_in` | text | First fixed version, e.g. 4.2.1. | 4.2.1 |
| `date` | text | Publication date. | Oct 24, 2026 |
| `site` | text | Advisory page or security site. | northwind.dev/security |
| `accent` | colour | Brand colour as hex, e.g. #6366f1. Drives buttons, highlights and the background glow. (default: #22d3ee) | #22d3ee |
| `theme` | dark | light | Colour scheme: dark or light. | — |

## Render it with one request

```bash
curl -X POST "https://shareglint.com/v1/images?wait=true" \
  -H "Authorization: Bearer sk_live_YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "template": "security-advisory",
    "modifications": {
        "title": "Path traversal in archive extraction lets a crafted tarball write outside the target directory",
        "advisory_id": "CVE-2026-41872",
        "severity": "critical",
        "score": "9.8",
        "package": "npm · tar-stream-lite",
        "affected": "< 4.2.1",
        "fixed_in": "4.2.1",
        "date": "Oct 24, 2026",
        "site": "northwind.dev/security"
    }
}'
```

## Make it yours

accent and theme change per request. For anything more, copy the template into your account: you get an ordinary HTML template with the same fields that you can edit in the dashboard or through the API. If the slug is free on your account, the copy takes it — your integrations switch to your version without changing a line.

```bash
curl -X POST "https://shareglint.com/v1/templates/library/security-advisory/copy" -H "Authorization: Bearer sk_live_YOUR_KEY"
```