{"action":"Upgrade clickmigrate to 1.0.3 or later.","affected":[{"fixed":"1.0.3","introduced":"0"}],"component":"clickmigrate","cve_ids":["CVE-2026-68549"],"ecosystem":"PyPI","exploited":false,"fixed_versions":["1.0.3"],"ghsa_id":"GHSA-vgf9-9mxx-hq54","id":"tcs_01M5JHHRBY3XJZKA4TCH5VXR5H","modified_at":"2026-10-16T19:30:04.006715210Z","published_at":"2026-10-16T19:17:28Z","references":["https://osv.dev/vulnerability/GHSA-vgf9-9mxx-hq54","https://github.com/QueueForge/ClickMigrate/security/advisories/GHSA-vgf9-9mxx-hq54","https://github.com/QueueForge/ClickMigrate/commit/6b1f2c0202630a82252b3331aa57e64327e112b6","https://github.com/QueueForge/ClickMigrate"],"severity":{"label":"low","score":3.3},"sources":[{"source":"osv","source_id":"GHSA-vgf9-9mxx-hq54","url":"https://osv.dev/vulnerability/GHSA-vgf9-9mxx-hq54"}],"summary":"ClickMigrate has Path Traversal in \"revision -m\" argument"}