{"action":"Upgrade products-isurlinportal to 2.1.0 or later.","affected":[{"fixed":"4.0.0","introduced":"4.0.0a1"},{"fixed":"3.1.0","introduced":"3.0.0"},{"fixed":"2.1.0","introduced":"0"},{"fixed":"2.1.0","introduced":"0"},{"fixed":"3.1.0","introduced":"3.0.0"}],"component":"products-isurlinportal","cve_ids":["CVE-2026-28413"],"ecosystem":"PyPI","epss":0.00257,"exploited":false,"fixed_versions":["4.0.0","3.1.0","2.1.0"],"ghsa_id":"GHSA-43gx-6gv6-3jcp","id":"tcs_01M5KEX24BDT6JHN5EHB6XP5JX","modified_at":"2026-06-08T18:45:17.829069103Z","published_at":"2026-03-02T20:14:23Z","references":["https://osv.dev/vulnerability/GHSA-43gx-6gv6-3jcp","https://github.com/plone/Products.isurlinportal/security/advisories/GHSA-43gx-6gv6-3jcp","https://nvd.nist.gov/vuln/detail/CVE-2026-28413","https://github.com/plone/Products.isurlinportal","https://github.com/pypa/advisory-database/tree/main/vulns/products-isurlinportal/PYSEC-2026-112.yaml"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-43gx-6gv6-3jcp","url":"https://osv.dev/vulnerability/GHSA-43gx-6gv6-3jcp"}],"summary":"Products.isurlinportal has possible open redirect when using more than 2 forward slashes"}