{"action":"Upgrade waitress to 2.1.2 or later.","affected":[{"fixed":"2.1.2","introduced":"2.1.0"}],"component":"waitress","cve_ids":["CVE-2022-31015"],"ecosystem":"PyPI","epss":0.01498,"exploited":false,"fixed_versions":["2.1.2"],"ghsa_id":"GHSA-f5x9-8jwc-25rw","id":"tcs_01M5KFEJ48P73J710DEYBMHYJ9","modified_at":"2024-11-19T16:22:52.848754Z","published_at":"2022-06-02T20:37:48Z","references":["https://osv.dev/vulnerability/GHSA-f5x9-8jwc-25rw","https://github.com/Pylons/waitress/security/advisories/GHSA-f5x9-8jwc-25rw","https://nvd.nist.gov/vuln/detail/CVE-2022-31015","https://github.com/Pylons/waitress/issues/374","https://github.com/Pylons/waitress/pull/377","https://github.com/Pylons/waitress/commit/4f6789b035610e0552738cdc4b35ca809a592d48","https://github.com/Pylons/waitress","https://github.com/pypa/advisory-database/tree/main/vulns/waitress/PYSEC-2022-205.yaml"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-f5x9-8jwc-25rw","url":"https://osv.dev/vulnerability/GHSA-f5x9-8jwc-25rw"}],"summary":"Uncaught Exception (due to a data race) leads to process termination in Waitress"}