{"action":"Upgrade attic to 0.15 or later.","affected":[{"fixed":"0.15","introduced":"0"}],"component":"attic","cve_ids":["CVE-2015-4082"],"ecosystem":"PyPI","epss":0.02486,"exploited":false,"fixed_versions":["0.15"],"ghsa_id":"GHSA-5x6q-ffwj-8vcf","id":"tcs_01M5KF1ZDEK2C5HE0KSW8HCFXK","modified_at":"2024-12-04T05:38:33.068973Z","published_at":"2022-05-17T01:57:32Z","references":["https://osv.dev/vulnerability/GHSA-5x6q-ffwj-8vcf","https://nvd.nist.gov/vuln/detail/CVE-2015-4082","https://github.com/jborg/attic/issues/271","https://github.com/jborg/attic/commit/78f9ad1faba7193ca7f0acccbc13b1ff6ebf9072","https://github.com/jborg/attic","https://github.com/pypa/advisory-database/tree/main/vulns/attic/PYSEC-2017-6.yaml","https://web.archive.org/web/20200517225455/http://www.securityfocus.com/bid/74821","http://www.openwall.com/lists/oss-security/2015/05/31/3","http://www.securityfocus.com/bid/74821"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-5x6q-ffwj-8vcf","url":"https://osv.dev/vulnerability/GHSA-5x6q-ffwj-8vcf"}],"summary":"attic has improper verification of unencrypted backups"}