{"action":"Upgrade eve-srp to 0.12.12 or later.","affected":[{"fixed":"0.12.12","introduced":"0"}],"component":"eve-srp","cve_ids":["CVE-2020-36660"],"ecosystem":"PyPI","epss":0.00672,"exploited":false,"fixed_versions":["0.12.12"],"ghsa_id":"GHSA-fxqx-xgqq-gf42","id":"tcs_01M5KFGDNE7SE75RFQPEK311F2","modified_at":"2024-09-20T16:35:30.973148Z","published_at":"2023-02-06T18:30:30Z","references":["https://osv.dev/vulnerability/GHSA-fxqx-xgqq-gf42","https://nvd.nist.gov/vuln/detail/CVE-2020-36660","https://github.com/paxswill/evesrp/commit/9e03f68e46e85ca9c9694a6971859b3ee66f0240","https://github.com/paxswill/evesrp","https://github.com/paxswill/evesrp/releases/tag/v0.12.12","https://github.com/pypa/advisory-database/tree/main/vulns/eve-srp/PYSEC-2023-208.yaml","https://vuldb.com/?ctiid.220211","https://vuldb.com/?id.220211"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-fxqx-xgqq-gf42","url":"https://osv.dev/vulnerability/GHSA-fxqx-xgqq-gf42"}],"summary":"Exposure of Sensitive Information in EVE-SRP"}