{"action":"No fix published. Pin and monitor.","affected":[],"component":"extractor","cve_ids":["CVE-2006-2458"],"ecosystem":"PyPI","epss":0.09002,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-f836-7jqw-3684","id":"tcs_01M5KFES6QK9H9NVD9GX7R22P2","modified_at":"2024-11-26T16:16:44Z","published_at":"2022-05-01T06:59:15Z","references":["https://osv.dev/vulnerability/GHSA-f836-7jqw-3684","https://nvd.nist.gov/vuln/detail/CVE-2006-2458","https://exchange.xforce.ibmcloud.com/vulnerabilities/26531","https://exchange.xforce.ibmcloud.com/vulnerabilities/26532","https://github.com/pypa/advisory-database/tree/main/vulns/extractor/PYSEC-2006-4.yaml","http://gnunet.org/libextractor","http://www.debian.org/security/2006/dsa-1081","http://www.gentoo.org/security/en/glsa/glsa-200605-14.xml"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-f836-7jqw-3684","url":"https://osv.dev/vulnerability/GHSA-f836-7jqw-3684"}],"summary":"Libextractor multiple heap-based buffer overflows"}