{"action":"Upgrade django-sendfile2 to 0.6.0 or later.","affected":[{"fixed":"0.6.0","introduced":"0"}],"component":"django-sendfile2","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["0.6.0"],"ghsa_id":"GHSA-6r3c-8xf3-ggrr","id":"tcs_01M5KF416W3JDJDHMBQ4HZSTD5","modified_at":"2024-12-02T05:47:45.852551Z","published_at":"2020-06-24T17:15:26Z","references":["https://osv.dev/vulnerability/GHSA-6r3c-8xf3-ggrr","https://github.com/moggers87/django-sendfile2/security/advisories/GHSA-6r3c-8xf3-ggrr","https://github.com/moggers87/django-sendfile2/commit/f870c52398a55b9b5189932dd8caa24efb4bc1e1","https://github.com/moggers87/django-sendfile2"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-6r3c-8xf3-ggrr","url":"https://osv.dev/vulnerability/GHSA-6r3c-8xf3-ggrr"}],"summary":"Directory traversal outside of SENDFILE_ROOT in django-sendfile2"}