In MISP 2.4.167, app/webroot/js/event-graph.js has an XSS vulnerability via an event-graph preview payload.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-24026.json"