{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.9.1"}],"component":"sqla-yaml-fixtures","cve_ids":["CVE-2019-3575"],"ecosystem":"PyPI","epss":0.00401,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-2x54-j4m3-r6wx","id":"tcs_01M5KETFRNRDJN0TXSQ91WJQCG","modified_at":"2024-10-28T14:43:47.933637Z","published_at":"2019-01-04T17:44:48Z","references":["https://osv.dev/vulnerability/GHSA-2x54-j4m3-r6wx","https://nvd.nist.gov/vuln/detail/CVE-2019-3575","https://github.com/schettino72/sqla_yaml_fixtures/issues/20","https://github.com/advisories/GHSA-2x54-j4m3-r6wx","https://github.com/pypa/advisory-database/tree/main/vulns/sqla-yaml-fixtures/PYSEC-2019-122.yaml","https://github.com/schettino72/sqla_yaml_fixtures"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"GHSA-2x54-j4m3-r6wx","url":"https://osv.dev/vulnerability/GHSA-2x54-j4m3-r6wx"}],"summary":"sqla-yaml-fixtures is vulnerable to Code Injection"}