{"action":"Upgrade products-cmfcore to 2.7.1 or later.","affected":[{"fixed":"3.2","introduced":"3.0"},{"fixed":"2.7.1","introduced":"0"}],"component":"products-cmfcore","cve_ids":["CVE-2023-36814"],"ecosystem":"PyPI","epss":0.00723,"exploited":false,"fixed_versions":["3.2","2.7.1"],"ghsa_id":"GHSA-4hpj-8rhv-9x87","id":"tcs_01M5KEY9HG0V944QGFP1H549N7","modified_at":"2026-09-10T03:50:08.494348851Z","published_at":"2023-07-05T22:42:09Z","references":["https://osv.dev/vulnerability/GHSA-4hpj-8rhv-9x87","https://github.com/zopefoundation/Products.CMFCore/security/advisories/GHSA-4hpj-8rhv-9x87","https://nvd.nist.gov/vuln/detail/CVE-2023-36814","https://github.com/zopefoundation/Products.CMFCore/commit/40f03f43a60f28ca9485c8ef429efef729be54e5","https://github.com/zopefoundation/Products.CMFCore/commit/c1847a9042abe7965271fa73762dfe091b576de","https://github.com/pypa/advisory-database/tree/main/vulns/products-cmfcore/PYSEC-2023-113.yaml","https://github.com/zopefoundation/Products.CMFCore"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-4hpj-8rhv-9x87","url":"https://osv.dev/vulnerability/GHSA-4hpj-8rhv-9x87"}],"summary":"Products.CMFCore unauthenticated denial of service and crash via unchecked use of input with Python's marshal module"}