{"action":"Upgrade ipsilon to 1.0.3 (1.0.x), 1.1.2 (1.1.x), 1.2.1 (1.2.x) or 2.0.2 (2.0.x) or later.","affected":[{"fixed":"2.0.2","introduced":"2.0.0"},{"fixed":"1.2.1","introduced":"1.2.0"},{"fixed":"1.1.2","introduced":"1.1.0"},{"fixed":"1.0.3","introduced":"1.0.0"}],"component":"ipsilon","cve_ids":["CVE-2016-8638"],"ecosystem":"PyPI","epss":0.02136,"exploited":false,"fixed_versions":["2.0.2","1.2.1","1.1.2","1.0.3"],"ghsa_id":"GHSA-376m-3rm2-9jm6","id":"tcs_01M5KEV4K2NWX52ESQ6JJT9TQP","modified_at":"2026-10-27T17:45:04.012363817Z","published_at":"2022-05-14T03:55:23Z","references":["https://osv.dev/vulnerability/GHSA-376m-3rm2-9jm6","https://nvd.nist.gov/vuln/detail/CVE-2016-8638","https://github.com/ipsilon-project/ipsilon/commit/1c48414877fc110652b6078a29529972c7ec9122","https://github.com/ipsilon-project/ipsilon/commit/64fc366c054fc6af1d9d2692902db169884b5f78","https://github.com/ipsilon-project/ipsilon/commit/a33303b6beb5c316d7c18b23566b7666a4e307a4","https://github.com/ipsilon-project/ipsilon/commit/b4744a92d4fa7f6d7ade0ae2d99a2dc0ea94734d","https://access.redhat.com/errata/RHSA-2016:2809","https://access.redhat.com/security/cve/CVE-2016-8638","https://bugzilla.redhat.com/show_bug.cgi?id=1392829","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8638","https://github.com/ipsilon-project/ipsilon","https://ipsilon-project.org/advisory/CVE-2016-8638.txt","https://ipsilon-project.org/release/2.1.0.html","https://pagure.io/ipsilon/c/511fa8b7001c2f9a42301aa1d4b85aaf170a461c","http://rhn.redhat.com/errata/RHSA-2016-2809.html","http://www.securityfocus.com/bid/94439","https://github.com/advisories/GHSA-376m-3rm2-9jm6","https://github.com/pypa/advisory-database/tree/main/vulns/ipsilon/PYSEC-2026-360.yaml","https://pypi.org/project/ipsilon"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-376m-3rm2-9jm6","url":"https://osv.dev/vulnerability/GHSA-376m-3rm2-9jm6"}],"summary":"Session Fixation in ipsilon"}