{"action":"Upgrade guake to 3.8.5 or later.","affected":[{"fixed":"3.8.5","introduced":"0"}],"component":"guake","cve_ids":["CVE-2021-23556"],"ecosystem":"PyPI","epss":0.0113,"exploited":false,"fixed_versions":["3.8.5"],"ghsa_id":"GHSA-7x48-7466-3g33","id":"tcs_01M5KF6SZKPNREB6BCPGAEGQY8","modified_at":"2024-11-30T05:44:09.503724Z","published_at":"2022-03-18T00:01:11Z","references":["https://osv.dev/vulnerability/GHSA-7x48-7466-3g33","https://nvd.nist.gov/vuln/detail/CVE-2021-23556","https://github.com/Guake/guake/issues/1796","https://github.com/Guake/guake/pull/2017","https://github.com/Guake/guake/commit/b769b3a5fd71a107c58679d217cccc971b4196b4","https://github.com/Guake/guake","https://github.com/Guake/guake/releases","https://github.com/advisories/GHSA-7x48-7466-3g33","https://github.com/pypa/advisory-database/tree/main/vulns/guake/PYSEC-2022-165.yaml","https://snyk.io/vuln/SNYK-PYTHON-GUAKE-2386334"],"severity":{"label":"medium","score":6.4},"sources":[{"source":"osv","source_id":"GHSA-7x48-7466-3g33","url":"https://osv.dev/vulnerability/GHSA-7x48-7466-3g33"}],"summary":"Command injection in guake"}