{"action":"Upgrade uvicorn to 0.11.7 or later.","affected":[{"fixed":"0.11.7","introduced":"0"}],"component":"uvicorn","cve_ids":["CVE-2020-7694"],"ecosystem":"PyPI","epss":0.01357,"exploited":false,"fixed_versions":["0.11.7"],"ghsa_id":"GHSA-33c7-2mpw-hg34","id":"tcs_01M5KETPSW01FZFA5PCDGKQ0Y2","modified_at":"2024-11-18T22:34:41.829085Z","published_at":"2020-07-29T18:07:16Z","references":["https://osv.dev/vulnerability/GHSA-33c7-2mpw-hg34","https://nvd.nist.gov/vuln/detail/CVE-2020-7694","https://github.com/encode/uvicorn/issues/723","https://github.com/encode/uvicorn/commit/895807f94ea9a8e588605c12076b7d7517cda503","https://github.com/encode/uvicorn","https://github.com/pypa/advisory-database/tree/main/vulns/uvicorn/PYSEC-2020-150.yaml","https://snyk.io/vuln/SNYK-PYTHON-UVICORN-575560"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-33c7-2mpw-hg34","url":"https://osv.dev/vulnerability/GHSA-33c7-2mpw-hg34"}],"summary":"Log injection in uvicorn"}