{"action":"Upgrade fiona to 1.10b2 or later.","affected":[{"fixed":"1.10b2","introduced":"0"}],"component":"fiona","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["1.10b2"],"ghsa_id":"GHSA-g4m4-9q4c-mfw6","id":"tcs_01M5KFGRP9PG0XTJ9NZPMSRYVJ","modified_at":"2024-12-01T05:38:41.596432Z","published_at":"2024-07-16T19:32:22Z","references":["https://osv.dev/vulnerability/GHSA-g4m4-9q4c-mfw6","https://github.com/Toblerity/Fiona/security/advisories/GHSA-g4m4-9q4c-mfw6","https://nvd.nist.gov/vuln/detail/CVE-2020-14152","https://github.com/libjpeg-turbo/libjpeg-turbo/issues/500","https://github.com/OSGeo/gdal/commit/075480a3cba13c9dd2ab4e39e92d6147a6c98eca","https://github.com/Toblerity/Fiona/commit/07708211726e276e22dedb9cd567b4f6a7b8c809","https://github.com/libjpeg-turbo/libjpeg-turbo/commit/da2a27ef056a0179cbd80f9146e58b89403d9933","https://github.com/Toblerity/Fiona"],"severity":{"label":"high","score":7.1},"sources":[{"source":"osv","source_id":"GHSA-g4m4-9q4c-mfw6","url":"https://osv.dev/vulnerability/GHSA-g4m4-9q4c-mfw6"}],"summary":"Fiona affected by CVE-2020-14152 related to madler-zlib"}