{"action":"Upgrade gerapy to 0.9.8 or later.","affected":[{"fixed":"0.9.8","introduced":"0"}],"component":"gerapy","cve_ids":["CVE-2021-43857"],"ecosystem":"PyPI","epss":0.55608,"exploited":false,"fixed_versions":["0.9.8"],"ghsa_id":"GHSA-9w7f-m4j4-j3xw","id":"tcs_01M5KFBPTYJW0A029JHH7SMB1Y","modified_at":"2026-07-08T06:28:07.723809536Z","published_at":"2022-01-06T17:36:38Z","references":["https://osv.dev/vulnerability/GHSA-9w7f-m4j4-j3xw","https://github.com/Gerapy/Gerapy/security/advisories/GHSA-9w7f-m4j4-j3xw","https://nvd.nist.gov/vuln/detail/CVE-2021-43857","https://github.com/Gerapy/Gerapy/issues/219","https://github.com/Gerapy/Gerapy/commit/49bcb19be5e0320e7e1535f34fe00f16a3cf3b28","https://github.com/Gerapy/Gerapy","https://github.com/pypa/advisory-database/tree/main/vulns/gerapy/PYSEC-2021-867.yaml","https://github.com/pypa/advisory-database/tree/main/vulns/gerapy/PYSEC-2022-228.yaml","http://packetstormsecurity.com/files/165459/Gerapy-0.9.7-Remote-Code-Execution.html"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-9w7f-m4j4-j3xw","url":"https://osv.dev/vulnerability/GHSA-9w7f-m4j4-j3xw"}],"summary":"Gerapy may cause remote code execution"}