{"action":"Upgrade emailproxy to 2023.12.19 or later.","affected":[{"fixed":"2023.12.19","introduced":"0"}],"component":"emailproxy","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["2023.12.19"],"ghsa_id":"GHSA-9wgg-m99q-hhfc","id":"tcs_01M5KFBQ95956BPY28GHH03Q3T","modified_at":"2024-11-28T05:40:43.123163Z","published_at":"2023-12-19T23:12:03Z","references":["https://osv.dev/vulnerability/GHSA-9wgg-m99q-hhfc","https://github.com/simonrob/email-oauth2-proxy/security/advisories/GHSA-9wgg-m99q-hhfc","https://github.com/simonrob/email-oauth2-proxy/commit/8c874c2ff3d503ac20c7d32f46e08547fcb9e23f","https://github.com/simonrob/email-oauth2-proxy/commit/eaaa1a2e7a132bf0958dd2f99a749ad98e3212aa","https://github.com/simonrob/email-oauth2-proxy","https://github.com/simonrob/email-oauth2-proxy/releases/tag/2023-12-19"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-9wgg-m99q-hhfc","url":"https://osv.dev/vulnerability/GHSA-9wgg-m99q-hhfc"}],"summary":"Expired tokens can be renewed without validating the account password"}