{"action":"Upgrade xml2rfc to 3.27.0 or later.","affected":[{"fixed":"3.27.0","introduced":"3.12.0"}],"component":"xml2rfc","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["3.27.0"],"ghsa_id":"GHSA-432c-wxpg-m4q3","id":"tcs_01M5KEWZEYWB2MJEN190D9DE5R","modified_at":"2025-02-07T20:36:32.770761Z","published_at":"2025-02-07T20:32:27Z","references":["https://osv.dev/vulnerability/GHSA-432c-wxpg-m4q3","https://github.com/ietf-tools/xml2rfc/security/advisories/GHSA-432c-wxpg-m4q3","https://github.com/ietf-tools/xml2rfc/commit/ec98f9cb4b9a8658222117df037dda473ca3f4e4","https://github.com/ietf-tools/xml2rfc"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-432c-wxpg-m4q3","url":"https://osv.dev/vulnerability/GHSA-432c-wxpg-m4q3"}],"summary":"xml2rfc has file inclusion irregularities"}