{"action":"Upgrade babel to 2.9.1 or later.","affected":[{"fixed":"2.9.1","introduced":"0"}],"component":"babel","cve_ids":["CVE-2021-42771"],"ecosystem":"PyPI","epss":0.0077,"exploited":false,"fixed_versions":["2.9.1"],"ghsa_id":"GHSA-h4m5-qpfp-3mpv","id":"tcs_01M5KFJRGPF634J6TY1D81VC6Y","modified_at":"2024-09-12T21:07:41.408222Z","published_at":"2021-10-21T17:49:59Z","references":["https://osv.dev/vulnerability/GHSA-h4m5-qpfp-3mpv","https://nvd.nist.gov/vuln/detail/CVE-2021-42771","https://github.com/python-babel/babel/pull/782","https://github.com/python-babel/babel/commit/412015ef642bfcc0d8ba8f4d05cdbb6aac98d9b3","https://github.com/advisories/GHSA-h4m5-qpfp-3mpv","https://github.com/pypa/advisory-database/tree/main/vulns/babel/PYSEC-2021-421.yaml","https://github.com/python-babel/babel","https://lists.debian.org/debian-lts-announce/2021/10/msg00018.html","https://lists.debian.org/debian-lts/2021/10/msg00040.html","https://www.debian.org/security/2021/dsa-5018","https://www.tenable.com/security/research/tra-2021-14"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"GHSA-h4m5-qpfp-3mpv","url":"https://osv.dev/vulnerability/GHSA-h4m5-qpfp-3mpv"}],"summary":"Directory Traversal in Babel"}