{"action":"Upgrade ckan to 2.10.5 or later.","affected":[{"fixed":"2.10.5","introduced":"0"}],"component":"ckan","cve_ids":["CVE-2024-43371"],"ecosystem":"PyPI","epss":0.00369,"exploited":false,"fixed_versions":["2.10.5"],"ghsa_id":"GHSA-g9ph-j5vj-f8wm","id":"tcs_01M5KFHA30215TDRZ5TAFR6NBH","modified_at":"2026-07-07T17:56:46.580309051Z","published_at":"2024-08-21T18:27:11Z","references":["https://osv.dev/vulnerability/GHSA-g9ph-j5vj-f8wm","https://github.com/ckan/ckan/security/advisories/GHSA-g9ph-j5vj-f8wm","https://nvd.nist.gov/vuln/detail/CVE-2024-43371","https://github.com/ckan/ckan/commit/382beaec98cb331f2a030459ef043c50eaf5ad53","https://github.com/ckan/ckan/commit/8601183cc2fc87277ea5b33ff75c3a5610812ab5","https://github.com/ckan/ckan"],"severity":{"label":"medium","score":4.5},"sources":[{"source":"osv","source_id":"GHSA-g9ph-j5vj-f8wm","url":"https://osv.dev/vulnerability/GHSA-g9ph-j5vj-f8wm"}],"summary":"Potential access to sensitive URLs via CKAN extensions (SSRF)"}