{"action":"Upgrade roundup to 1.4.14 or later.","affected":[{"fixed":"1.4.14","introduced":"0"}],"component":"roundup","cve_ids":["CVE-2010-2491"],"ecosystem":"PyPI","epss":0.02551,"exploited":false,"fixed_versions":["1.4.14"],"ghsa_id":"GHSA-frgf-rv99-862x","id":"tcs_01M5KFG1RB1V582FMFEWFBX65P","modified_at":"2024-10-26T23:02:16.335715Z","published_at":"2022-05-17T05:28:58Z","references":["https://osv.dev/vulnerability/GHSA-frgf-rv99-862x","https://nvd.nist.gov/vuln/detail/CVE-2010-2491","https://github.com/roundup-tracker/roundup/commit/dcef024bae8f63d290454250767a377eb0e1647b","https://bugzilla.redhat.com/show_bug.cgi?id=610861","https://github.com/pypa/advisory-database/tree/main/vulns/roundup/PYSEC-2010-31.yaml","https://github.com/roundup-tracker/roundup","https://web.archive.org/web/20111225190151/http://secunia.com/advisories/41585","https://web.archive.org/web/20140725071254/http://secunia.com/advisories/40433","https://web.archive.org/web/20200228183400/http://www.securityfocus.com/bid/41326","http://bugs.gentoo.org/show_bug.cgi?id=326395","http://issues.roundup-tracker.org/issue2550654","http://lists.fedoraproject.org/pipermail/package-announce/2010-September/048018.html","http://lists.fedoraproject.org/pipermail/package-announce/2010-September/048061.html","http://lists.fedoraproject.org/pipermail/package-announce/2010-September/048221.html","http://roundup.svn.sourceforge.net/viewvc/roundup/roundup/trunk/roundup/cgi/client.py?r1=4486&r2=4485&pathrev=4486","http://roundup.svn.sourceforge.net/viewvc/roundup?view=revision&revision=4486","http://sourceforge.net/mailarchive/message.php?msg_name=AANLkTimIYtyRzTAReGmTSCEqPYBvwkkxrP6YKrdVm_nU%40mail.gmail.com","http://www.openwall.com/lists/oss-security/2010/07/02/12","http://www.openwall.com/lists/oss-security/2010/07/02/3"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-frgf-rv99-862x","url":"https://osv.dev/vulnerability/GHSA-frgf-rv99-862x"}],"summary":"Roundup Cross-site Scripting (XSS) vulnerability"}