{"action":"Upgrade vantage6 to 4.0.0 or later.","affected":[{"fixed":"4.0.0","introduced":"0"}],"component":"vantage6","cve_ids":["CVE-2023-41882"],"ecosystem":"PyPI","epss":0.00497,"exploited":false,"fixed_versions":["4.0.0"],"ghsa_id":"GHSA-gc57-xhh5-m94r","id":"tcs_01M5KFHBR0P06QZ07VA2TGE9RZ","modified_at":"2024-11-18T23:23:43.658746Z","published_at":"2023-10-13T19:29:13Z","references":["https://osv.dev/vulnerability/GHSA-gc57-xhh5-m94r","https://github.com/vantage6/vantage6/security/advisories/GHSA-gc57-xhh5-m94r","https://nvd.nist.gov/vuln/detail/CVE-2023-41882","https://github.com/vantage6/vantage6/pull/711","https://github.com/vantage6/vantage6/commit/86564e103cbac5238ce2fe392e3357e0e8c20220","https://github.com/pypa/advisory-database/tree/main/vulns/vantage6/PYSEC-2023-201.yaml","https://github.com/vantage6/vantage6","https://github.com/vantage6/vantage6/blob/0682c4288f43fee5bcc72dc448cdd99bd7e57f76/docs/release_notes.rst#400"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-gc57-xhh5-m94r","url":"https://osv.dev/vulnerability/GHSA-gc57-xhh5-m94r"}],"summary":"Improper Access Control in vantage6"}