{"action":"Upgrade cookiecutter to 2.1.1 or later.","affected":[{"fixed":"2.1.1","introduced":"0"}],"component":"cookiecutter","cve_ids":["CVE-2022-24065"],"ecosystem":"PyPI","epss":0.04201,"exploited":false,"fixed_versions":["2.1.1"],"ghsa_id":"GHSA-f4q6-9qm4-h8j4","id":"tcs_01M5KFECJV38RGE5CB7F9644DP","modified_at":"2024-11-25T05:24:55.529118Z","published_at":"2022-06-09T23:48:49Z","references":["https://osv.dev/vulnerability/GHSA-f4q6-9qm4-h8j4","https://nvd.nist.gov/vuln/detail/CVE-2022-24065","https://github.com/cookiecutter/cookiecutter/commit/fdffddb31fd2b46344dfa317531ff155e7999f77","https://github.com/advisories/GHSA-f4q6-9qm4-h8j4","https://github.com/cookiecutter/cookiecutter","https://github.com/cookiecutter/cookiecutter/releases/tag/2.1.1","https://github.com/pypa/advisory-database/tree/main/vulns/cookiecutter/PYSEC-2022-204.yaml","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/G5TXC4JYTNGOUFMCXPZ6QKWEZN3URTAK","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HQKWT7SGFDCUPPLDIELTN7FVTHWDL5YK","https://snyk.io/vuln/SNYK-PYTHON-COOKIECUTTER-2414281"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-f4q6-9qm4-h8j4","url":"https://osv.dev/vulnerability/GHSA-f4q6-9qm4-h8j4"}],"summary":"OS Command Injection in cookiecutter"}