{"action":"Upgrade uvicorn to 0.11.7 or later.","affected":[{"fixed":"0.11.7","introduced":"0"}],"component":"uvicorn","cve_ids":["CVE-2020-7695"],"ecosystem":"PyPI","epss":0.01386,"exploited":false,"fixed_versions":["0.11.7"],"ghsa_id":"GHSA-f97h-2pfx-f59f","id":"tcs_01M5KFEY9G272117RHETBRGQC9","modified_at":"2024-11-18T22:36:16.950355Z","published_at":"2020-07-29T18:07:20Z","references":["https://osv.dev/vulnerability/GHSA-f97h-2pfx-f59f","https://nvd.nist.gov/vuln/detail/CVE-2020-7695","https://github.com/encode/uvicorn","https://github.com/pypa/advisory-database/tree/main/vulns/uvicorn/PYSEC-2020-151.yaml","https://snyk.io/vuln/SNYK-PYTHON-UVICORN-570471"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-f97h-2pfx-f59f","url":"https://osv.dev/vulnerability/GHSA-f97h-2pfx-f59f"}],"summary":"HTTP response splitting in uvicorn"}