{"action":"Upgrade django-termsandconditions to 2.0.11 or later.","affected":[{"fixed":"2.0.11","introduced":"0"}],"component":"django-termsandconditions","cve_ids":["CVE-2022-4589"],"ecosystem":"PyPI","epss":0.00495,"exploited":false,"fixed_versions":["2.0.11"],"ghsa_id":"GHSA-6rmf-cv6p-4h27","id":"tcs_01M5KF434QH0MZWCRWA3EVNSG0","modified_at":"2026-07-07T11:56:07.090003946Z","published_at":"2022-12-17T15:30:23Z","references":["https://osv.dev/vulnerability/GHSA-6rmf-cv6p-4h27","https://nvd.nist.gov/vuln/detail/CVE-2022-4589","https://github.com/cyface/django-termsandconditions/pull/239","https://github.com/cyface/django-termsandconditions/commit/03396a1c2e0af95e12a45c5faef7e47a4b513e1a","https://github.com/cyface/django-termsandconditions","https://github.com/cyface/django-termsandconditions/releases/tag/v2.0.10","https://github.com/cyface/django-termsandconditions/releases/tag/v2.0.11","https://vuldb.com/?id.216175"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-6rmf-cv6p-4h27","url":"https://osv.dev/vulnerability/GHSA-6rmf-cv6p-4h27"}],"summary":"Terms and Conditions Module vulnerable to Open Redirect"}