{"action":"Upgrade koji to 1.12.1 or later.","affected":[{"fixed":"1.15.1","introduced":"1.15"},{"fixed":"1.14.1","introduced":"1.14"},{"fixed":"1.13.1","introduced":"1.13"},{"fixed":"1.12.1","introduced":"1.12"}],"component":"koji","cve_ids":["CVE-2018-1002150"],"ecosystem":"PyPI","epss":0.01658,"exploited":false,"fixed_versions":["1.15.1","1.14.1","1.13.1","1.12.1"],"ghsa_id":"GHSA-6mww-xvh7-fq4f","id":"tcs_01M5KF3S07WTN97SK2TRMYCNJ1","modified_at":"2025-02-18T05:27:38.515234Z","published_at":"2018-07-12T20:29:40Z","references":["https://osv.dev/vulnerability/GHSA-6mww-xvh7-fq4f","https://nvd.nist.gov/vuln/detail/CVE-2018-1002150","https://docs.pagure.org/koji/CVE-2018-1002150","https://github.com/advisories/GHSA-6mww-xvh7-fq4f","https://github.com/pypa/advisory-database/tree/main/vulns/koji/PYSEC-2018-86.yaml","https://pagure.io/koji","https://pagure.io/koji/c/ab1ade7","https://pagure.io/koji/issue/850"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-6mww-xvh7-fq4f","url":"https://osv.dev/vulnerability/GHSA-6mww-xvh7-fq4f"}],"summary":"Koji hub call does not perform correct access checks"}