{"action":"Upgrade django-grappelli to 2.15.2 or later.","affected":[{"fixed":"2.15.2","introduced":"0"}],"component":"django-grappelli","cve_ids":["CVE-2021-46898"],"ecosystem":"PyPI","epss":0.00555,"exploited":false,"fixed_versions":["2.15.2"],"ghsa_id":"GHSA-9x43-5qcq-h79q","id":"tcs_01M5KFBRQ9BTKFAJMD4HD55WCZ","modified_at":"2024-09-13T20:24:36.552132Z","published_at":"2023-10-22T21:36:10Z","references":["https://osv.dev/vulnerability/GHSA-9x43-5qcq-h79q","https://nvd.nist.gov/vuln/detail/CVE-2021-46898","https://github.com/sehmaschine/django-grappelli/issues/975","https://github.com/sehmaschine/django-grappelli/pull/976","https://github.com/sehmaschine/django-grappelli/commit/4ca94bcda0fa2720594506853d85e00c8212968f","https://github.com/pypa/advisory-database/tree/main/vulns/django-grappelli/PYSEC-2023-211.yaml","https://github.com/sehmaschine/django-grappelli","https://github.com/sehmaschine/django-grappelli/compare/2.15.1...2.15.2"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-9x43-5qcq-h79q","url":"https://osv.dev/vulnerability/GHSA-9x43-5qcq-h79q"}],"summary":"Django Grappelli Open Redirect vulnerability"}