{"action":"Upgrade djblets to 0.6.30 or later.","affected":[{"fixed":"0.6.30","introduced":"0"},{"fixed":"0.7.19","introduced":"0.7.0"}],"component":"djblets","cve_ids":["CVE-2013-4409"],"ecosystem":"PyPI","epss":0.03649,"exploited":false,"fixed_versions":["0.6.30","0.7.19"],"ghsa_id":"GHSA-58h8-44mg-r43x","id":"tcs_01M5KF0E9E8PRE4GC5VJKQZKY5","modified_at":"2026-06-29T12:26:42.571816582Z","published_at":"2022-05-05T00:29:00Z","references":["https://osv.dev/vulnerability/GHSA-58h8-44mg-r43x","https://nvd.nist.gov/vuln/detail/CVE-2013-4409","https://access.redhat.com/security/cve/cve-2013-4409","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4409","https://exchange.xforce.ibmcloud.com/vulnerabilities/88059","https://github.com/djblets/djblets","https://github.com/djblets/djblets/blob/release-0.7.19/NEWS","https://github.com/pypa/advisory-database/tree/main/vulns/djblets/PYSEC-2019-175.yaml","https://security-tracker.debian.org/tracker/CVE-2013-4409","https://web.archive.org/web/20200228151135/https://www.securityfocus.com/bid/63029","https://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.15","http://lists.fedoraproject.org/pipermail/package-announce/2013-November/120619.html","http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119819.html","http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119820.html","http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119830.html","http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119831.html"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-58h8-44mg-r43x","url":"https://osv.dev/vulnerability/GHSA-58h8-44mg-r43x"}],"summary":"ReviewBoard and Djblets library are vulnerable to code execution"}