{"action":"Upgrade python to 3.12.1 or later.","affected":[{"fixed":"3.12.1","introduced":"0"}],"component":"python","cve_ids":["CVE-2023-6507"],"ecosystem":"python","exploited":false,"fixed_versions":["3.12.1"],"id":"tcs_01M5JV82FZDGFP5MS7N76YWBZ7","modified_at":"2026-07-31T14:09:16Z","published_at":"2023-12-08T18:20:49Z","references":["https://github.com/psf/advisory-database/blob/main/advisories/python/PSF-2023-12.json","https://mail.python.org/archives/list/security-announce@python.org/thread/AUL7QFHBLILGISS7U63B47AYSSGJJQZD/","https://www.cve.org/CVERecord?id=CVE-2023-6507"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"python-runtime","source_id":"PSF-2023-12","url":"https://github.com/psf/advisory-database/blob/main/advisories/python/PSF-2023-12.json"}],"summary":"Groups not dropped before running subprocess when using empty 'extra_groups' parameter"}