{"action":"Upgrade bsdiff4 to 1.2.0 or later.","affected":[{"fixed":"1.2.0","introduced":"0"}],"component":"bsdiff4","cve_ids":["CVE-2020-15904"],"ecosystem":"PyPI","epss":0.0105,"exploited":false,"fixed_versions":["1.2.0"],"ghsa_id":"GHSA-f8m3-jpxr-hm5x","id":"tcs_01M5KFEVWV9S1GZ1H8F5PZ4V11","modified_at":"2024-09-06T16:00:50.578968Z","published_at":"2022-05-24T17:24:16Z","references":["https://osv.dev/vulnerability/GHSA-f8m3-jpxr-hm5x","https://nvd.nist.gov/vuln/detail/CVE-2020-15904","https://github.com/ilanschnell/bsdiff4/commit/49a4cee2feef7deaf9d89e5e793a8824930284d7","https://github.com/ilanschnell/bsdiff4","https://github.com/ilanschnell/bsdiff4/blob/9a84c2ee01f5ba0742d18c9f3b3d5244ae7fb302/CHANGELOG.txt#L30-L31","https://github.com/ilanschnell/bsdiff4/blob/master/CHANGELOG.txt","https://github.com/pypa/advisory-database/tree/main/vulns/bsdiff4/PYSEC-2020-30.yaml"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"GHSA-f8m3-jpxr-hm5x","url":"https://osv.dev/vulnerability/GHSA-f8m3-jpxr-hm5x"}],"summary":"bsdiff4 out-of-bounds write via patch file"}