{"action":"Upgrade flask-oidc to 1.0.0 or later.","affected":[{"fixed":"1.0.0","introduced":"0"}],"component":"flask-oidc","cve_ids":["CVE-2016-1000001"],"ecosystem":"PyPI","epss":0.00818,"exploited":false,"fixed_versions":["1.0.0"],"ghsa_id":"GHSA-f9q6-69fh-4w5w","id":"tcs_01M5KFEZ7R3BH55KTAHWYJMGTZ","modified_at":"2024-09-20T20:24:21.765387Z","published_at":"2022-05-17T02:58:43Z","references":["https://osv.dev/vulnerability/GHSA-f9q6-69fh-4w5w","https://nvd.nist.gov/vuln/detail/CVE-2016-1000001","https://github.com/puiterwijk/flask-oidc/commit/f2ef8b4ffa445be00f6602e446e60916f4ee4d30","https://github.com/puiterwijk/flask-oidc","https://github.com/puiterwijk/flask-oidc/blob/master/flask_oidc/__init__.py#L293","https://github.com/pypa/advisory-database/tree/main/vulns/flask-oidc/PYSEC-2016-25.yaml"],"severity":{"label":"high","score":7.4},"sources":[{"source":"osv","source_id":"GHSA-f9q6-69fh-4w5w","url":"https://osv.dev/vulnerability/GHSA-f9q6-69fh-4w5w"}],"summary":"flask-oidc Open Redirect vulnerability"}