{"action":"Upgrade mesop to 1.3.4 or later.","affected":[{"fixed":"1.3.4","introduced":"0"}],"component":"mesop","cve_ids":["CVE-2026-93421"],"ecosystem":"PyPI","epss":0.00528,"exploited":false,"fixed_versions":["1.3.4"],"ghsa_id":"GHSA-g7f6-rxc4-qhph","id":"tcs_01M5KFH24YWFP58P67QS94GJT1","modified_at":"2026-10-01T17:55:47.100968033Z","published_at":"2026-09-23T19:01:05Z","references":["https://osv.dev/vulnerability/GHSA-g7f6-rxc4-qhph","https://github.com/mesop-dev/mesop/security/advisories/GHSA-g7f6-rxc4-qhph","https://github.com/mesop-dev/mesop/pull/1397","https://github.com/mesop-dev/mesop/commit/f38c42a1d3eba246941ef8d7f645072d53c58785","https://github.com/mesop-dev/mesop","https://github.com/mesop-dev/mesop/releases/tag/v1.3.4"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-g7f6-rxc4-qhph","url":"https://osv.dev/vulnerability/GHSA-g7f6-rxc4-qhph"}],"summary":"Mesop: Unauthenticated ANSI Escape Sequence Injection in CSP Reporting Endpoint"}