{"action":"Upgrade sosreport to 4.4 or later.","affected":[{"fixed":"4.4","introduced":"0"}],"component":"sosreport","cve_ids":["CVE-2022-2806"],"ecosystem":"PyPI","epss":0.00249,"exploited":false,"fixed_versions":["4.4"],"ghsa_id":"GHSA-7pf9-7cff-f854","id":"tcs_01M5KF6BXKCCX3FDPG8ASM1Y9N","modified_at":"2026-07-07T11:56:29.825594692Z","published_at":"2022-09-02T00:01:01Z","references":["https://osv.dev/vulnerability/GHSA-7pf9-7cff-f854","https://nvd.nist.gov/vuln/detail/CVE-2022-2806","https://github.com/sosreport/sos/pull/2947","https://github.com/sosreport/sos/commit/5fd872c64c53af37015f366295e0c2418c969757","https://github.com/sosreport/sos"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-7pf9-7cff-f854","url":"https://osv.dev/vulnerability/GHSA-7pf9-7cff-f854"}],"summary":"sosreport Exposure of Sensitive Information vulnerability"}