{"action":"Upgrade pyxdg to 0.26 or later.","affected":[{"fixed":"0.26","introduced":"0"}],"component":"pyxdg","cve_ids":["CVE-2014-1624"],"ecosystem":"PyPI","epss":0.00317,"exploited":false,"fixed_versions":["0.26"],"ghsa_id":"GHSA-7372-q459-jxhr","id":"tcs_01M5KF4MKMRBAC0X0M62W2NZPT","modified_at":"2024-12-06T05:42:41.254164Z","published_at":"2022-05-17T01:27:07Z","references":["https://osv.dev/vulnerability/GHSA-7372-q459-jxhr","https://nvd.nist.gov/vuln/detail/CVE-2014-1624","https://github.com/takluyver/pyxdg/commit/bd999c1c3fe7ee5f30ede2cf704cf03e400347b4","https://exchange.xforce.ibmcloud.com/vulnerabilities/90618","https://github.com/pypa/advisory-database/tree/main/vulns/pyxdg/PYSEC-2014-95.yaml","https://github.com/takluyver/pyxdg","https://web.archive.org/web/20200227194825/http://www.securityfocus.com/bid/65042","http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=736247","http://www.openwall.com/lists/oss-security/2014/01/21/3","http://www.openwall.com/lists/oss-security/2014/01/21/4"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-7372-q459-jxhr","url":"https://osv.dev/vulnerability/GHSA-7372-q459-jxhr"}],"summary":"pyxdg Arbitrary File Overwrite via Race Condition"}