{"action":"Upgrade ihatemoney to 4.1.5 or later.","affected":[{"fixed":"4.1.5","introduced":"0"}],"component":"ihatemoney","cve_ids":["CVE-2020-15120"],"ecosystem":"PyPI","epss":0.01029,"exploited":false,"fixed_versions":["4.1.5"],"ghsa_id":"GHSA-67j9-c52g-w2q9","id":"tcs_01M5KF2RPXMVXNDKV98XKG39S4","modified_at":"2026-09-10T03:48:48.309575321Z","published_at":"2020-07-27T17:47:52Z","references":["https://osv.dev/vulnerability/GHSA-67j9-c52g-w2q9","https://github.com/spiral-project/ihatemoney/security/advisories/GHSA-67j9-c52g-w2q9","https://nvd.nist.gov/vuln/detail/CVE-2020-15120","https://github.com/spiral-project/ihatemoney/commit/8d77cf5d5646e1d2d8ded13f0660638f57e98471","https://github.com/pypa/advisory-database/tree/main/vulns/ihatemoney/PYSEC-2020-264.yaml","https://github.com/spiral-project/ihatemoney"],"severity":{"label":"medium","score":4.9},"sources":[{"source":"osv","source_id":"GHSA-67j9-c52g-w2q9","url":"https://osv.dev/vulnerability/GHSA-67j9-c52g-w2q9"}],"summary":"Authorization Bypass in I hate money"}