{"action":"Upgrade lemur to 1.3.2 or later.","affected":[{"fixed":"1.3.2","introduced":"0"}],"component":"lemur","cve_ids":["CVE-2023-30797"],"ecosystem":"PyPI","epss":0.00791,"exploited":false,"fixed_versions":["1.3.2"],"ghsa_id":"GHSA-5fqv-mpj8-h7gm","id":"tcs_01M5KF0X1MXVWRP1NBW4APGHFE","modified_at":"2026-07-08T06:53:05.770636573Z","published_at":"2023-03-01T18:05:56Z","references":["https://osv.dev/vulnerability/GHSA-5fqv-mpj8-h7gm","https://github.com/Netflix/lemur/security/advisories/GHSA-5fqv-mpj8-h7gm","https://nvd.nist.gov/vuln/detail/CVE-2023-30797","https://github.com/Netflix/lemur/issues/3888","https://github.com/Netflix/lemur/commit/666d853212174ee7f4e6f8b3b4b389ede1872238","https://github.com/Netflix/lemur","https://github.com/Netflix/security-bulletins/blob/master/advisories/nflx-2023-001.md","https://github.com/pypa/advisory-database/tree/main/vulns/lemur/PYSEC-2023-20.yaml","https://vulncheck.com/advisories/netflix-lemur-weak-rng"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-5fqv-mpj8-h7gm","url":"https://osv.dev/vulnerability/GHSA-5fqv-mpj8-h7gm"}],"summary":"Lemur subject to insecure random generation"}