{"action":"Upgrade rply to 0.7.1 or later.","affected":[{"fixed":"0.7.1","introduced":"0"}],"component":"rply","cve_ids":["CVE-2014-1604"],"ecosystem":"PyPI","epss":0.00354,"exploited":false,"fixed_versions":["0.7.1"],"ghsa_id":"GHSA-9gcf-pq99-rjw3","id":"tcs_01M5KFASY69RWDMXXJTC910Q41","modified_at":"2026-07-09T16:56:20.570841183Z","published_at":"2022-05-17T01:27:10Z","references":["https://osv.dev/vulnerability/GHSA-9gcf-pq99-rjw3","https://nvd.nist.gov/vuln/detail/CVE-2014-1604","https://github.com/alex/rply/commit/fc9bbcd25b0b4f09bbd6339f710ad24c129d5d7c","https://exchange.xforce.ibmcloud.com/vulnerabilities/90593","https://github.com/alex/rply","https://github.com/pypa/advisory-database/tree/main/vulns/rply/PYSEC-2014-117.yaml","https://github.com/pypa/advisory-database/tree/main/vulns/rply/PYSEC-2014-17.yaml","http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=735263","http://www.openwall.com/lists/oss-security/2014/01/17/8","http://www.openwall.com/lists/oss-security/2014/01/18/4"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-9gcf-pq99-rjw3","url":"https://osv.dev/vulnerability/GHSA-9gcf-pq99-rjw3"}],"summary":"RPLY Predictable Tmpfile Names Allows Cache Spoofing"}