{"action":"Upgrade graphite-web to 0.9.11 or later.","affected":[{"fixed":"0.9.11","introduced":"0.9.5"}],"component":"graphite-web","cve_ids":["CVE-2013-5942"],"ecosystem":"PyPI","epss":0.02124,"exploited":false,"fixed_versions":["0.9.11"],"ghsa_id":"GHSA-ch3j-w953-hfcm","id":"tcs_01M5KFD2E62H6CHCN6SNRDEXQ2","modified_at":"2024-09-20T21:55:03.132138Z","published_at":"2022-05-17T05:03:05Z","references":["https://osv.dev/vulnerability/GHSA-ch3j-w953-hfcm","https://nvd.nist.gov/vuln/detail/CVE-2013-5942","https://github.com/graphite-project/graphite-web","https://github.com/graphite-project/graphite-web/blob/master/docs/releases/0_9_11.rst","https://github.com/pypa/advisory-database/tree/main/vulns/graphite-web/PYSEC-2013-34.yaml"],"severity":{"label":"critical","score":9},"sources":[{"source":"osv","source_id":"GHSA-ch3j-w953-hfcm","url":"https://osv.dev/vulnerability/GHSA-ch3j-w953-hfcm"}],"summary":"graphite-web is vulnerable to Remote Code Execution"}