{"action":"Upgrade poetry-plugin-tweak-dependencies-version to 1.5.6 or later.","affected":[{"fixed":"1.5.6","introduced":"0"}],"component":"poetry-plugin-tweak-dependencies-version","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["1.5.6"],"ghsa_id":"GHSA-5qvp-pr9f-2g2v","id":"tcs_01M5KF1JDVBSYG7EGKK6H13XCZ","modified_at":"2026-04-01T21:04:43.804300Z","published_at":"2026-04-01T20:52:20Z","references":["https://osv.dev/vulnerability/GHSA-5qvp-pr9f-2g2v","https://github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2","https://github.com/sbrunner/poetry-plugin-tweak-dependencies-version/security/advisories/GHSA-5qvp-pr9f-2g2v","https://github.com/sbrunner/poetry-plugin-tweak-dependencies-version/commit/54b5784d89f36cd413a8bc5032ab0a96438dcae3","https://github.com/sbrunner/poetry-plugin-tweak-dependencies-version","https://github.com/sbrunner/poetry-plugin-tweak-dependencies-version/releases/tag/1.5.6"],"severity":{"label":"medium","score":4.4},"sources":[{"source":"osv","source_id":"GHSA-5qvp-pr9f-2g2v","url":"https://osv.dev/vulnerability/GHSA-5qvp-pr9f-2g2v"}],"summary":"poetry-plugin-tweak-dependencies-version affected by CVE-2026-25645"}