{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.0.5"}],"component":"vng-api-common","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-c4cm-r9fh-jgj9","id":"tcs_01M5KFC51M9BN89BD9KY7KRB2W","modified_at":"2024-12-06T05:36:21.171667Z","published_at":"2024-02-09T17:04:47Z","references":["https://osv.dev/vulnerability/GHSA-c4cm-r9fh-jgj9","https://github.com/maykinmedia/commonground-api-common/security/advisories/GHSA-c4cm-r9fh-jgj9","https://github.com/maykinmedia/commonground-api-common/commit/20d9345a865338777839e8f02c21cd9d6f5a2cae"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-c4cm-r9fh-jgj9#PyPI/vng-api-common","url":"https://osv.dev/vulnerability/GHSA-c4cm-r9fh-jgj9"}],"summary":"commonground-api-common unexploitable privilege escalation in JWT authentication middleware"}