{"action":"Upgrade websockets to 9.1 or later.","affected":[{"fixed":"9.1","introduced":"0"}],"component":"websockets","cve_ids":["CVE-2021-33880"],"ecosystem":"PyPI","epss":0.02265,"exploited":false,"fixed_versions":["9.1"],"ghsa_id":"GHSA-8ch4-58qp-g3mp","id":"tcs_01M5KF7Y86MTX39GDK7HJFXPE5","modified_at":"2024-11-19T18:25:23.133425Z","published_at":"2021-06-11T17:43:14Z","references":["https://osv.dev/vulnerability/GHSA-8ch4-58qp-g3mp","https://nvd.nist.gov/vuln/detail/CVE-2021-33880","https://github.com/aaugustin/websockets/commit/547a26b685d08cac0aa64e5e65f7867ac0ea9bc0","https://github.com/aaugustin/websockets","https://github.com/pypa/advisory-database/tree/main/vulns/websockets/PYSEC-2021-95.yaml","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujan2022.html"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-8ch4-58qp-g3mp","url":"https://osv.dev/vulnerability/GHSA-8ch4-58qp-g3mp"}],"summary":"Observable Timing Discrepancy in aaugustin websockets library"}