{"action":"Upgrade roundup to 1.2.1 or later.","affected":[{"fixed":"1.2.1","introduced":"1.2"},{"fixed":"1.4.7","introduced":"1.4"}],"component":"roundup","cve_ids":["CVE-2009-2737"],"ecosystem":"PyPI","epss":0.02341,"exploited":false,"fixed_versions":["1.2.1","1.4.7"],"ghsa_id":"GHSA-9rj9-5wcv-xgf2","id":"tcs_01M5KFBFYXA66T8TG12WRRMPM2","modified_at":"2026-07-06T08:11:13.325496086Z","published_at":"2022-05-02T03:38:04Z","references":["https://osv.dev/vulnerability/GHSA-9rj9-5wcv-xgf2","https://nvd.nist.gov/vuln/detail/CVE-2009-2737","https://bugzilla.redhat.com/show_bug.cgi?id=489355","https://github.com/roundup-tracker/roundup/blob/d24abceaa19072b28e5c8ae0db4dd341597d14fc/CHANGES.txt#L2356","https://sourceforge.net/p/roundup/code/ci/4081","https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00429.html","https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00439.html","http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=518768","http://issues.roundup-tracker.org/issue2550521","http://secunia.com/advisories/34192","http://www.debian.org/security/2009/dsa-1754","http://www.osvdb.org/56368","http://www.securityfocus.com/bid/34059"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-9rj9-5wcv-xgf2","url":"https://osv.dev/vulnerability/GHSA-9rj9-5wcv-xgf2"}],"summary":"Roundup Improper Access Control"}