{"action":"Upgrade ipa to 4.6.7 or later.","affected":[{"fixed":"4.6.7","introduced":"4.6.2"},{"fixed":"4.7.4","introduced":"4.7.0"},{"fixed":"4.8.3","introduced":"4.8.0"}],"component":"ipa","cve_ids":["CVE-2019-14867"],"ecosystem":"PyPI","epss":0.07413,"exploited":false,"fixed_versions":["4.6.7","4.7.4","4.8.3"],"ghsa_id":"GHSA-7hpj-hfcr-5qwm","id":"tcs_01M5KF63DJXDA5HD5GGAQ93F4X","modified_at":"2026-07-06T08:11:04.645383601Z","published_at":"2021-12-06T18:17:38Z","references":["https://osv.dev/vulnerability/GHSA-7hpj-hfcr-5qwm","https://nvd.nist.gov/vuln/detail/CVE-2019-14867","https://access.redhat.com/errata/RHBA-2019:4268","https://access.redhat.com/errata/RHSA-2020:0378","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14867","https://github.com/advisories/GHSA-7hpj-hfcr-5qwm","https://github.com/pypa/advisory-database/tree/main/vulns/ipa/PYSEC-2019-28.yaml","https://github.com/pypa/advisory-db/tree/main/vulns/ipa/PYSEC-2019-28.yaml","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/67SEUWJAJ5RMH5K4Q6TS2I7HIMXUGNKF","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLFL5XDCJ3WT6JCLCQVKHZBLHGW7PW4T","https://www.freeipa.org/page/Releases/4.6.7","https://www.freeipa.org/page/Releases/4.7.4","https://www.freeipa.org/page/Releases/4.8.3"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-7hpj-hfcr-5qwm","url":"https://osv.dev/vulnerability/GHSA-7hpj-hfcr-5qwm"}],"summary":"Code injection in FreeIPA"}