{"action":"Upgrade pycsw to 1.8.6 or later.","affected":[{"fixed":"2.0.2","introduced":"2.0.0"},{"fixed":"1.8.6","introduced":"0"},{"fixed":"1.10.5","introduced":"1.10.0"}],"component":"pycsw","cve_ids":["CVE-2016-8640"],"ecosystem":"PyPI","epss":0.02306,"exploited":false,"fixed_versions":["2.0.2","1.8.6","1.10.5"],"ghsa_id":"GHSA-hg4c-rgvm-964g","id":"tcs_01M5KFKJ326KH33YD4Y4AYPXJS","modified_at":"2026-06-09T13:00:02Z","published_at":"2018-08-15T20:02:53Z","references":["https://osv.dev/vulnerability/GHSA-hg4c-rgvm-964g","https://nvd.nist.gov/vuln/detail/CVE-2016-8640","https://github.com/geopython/pycsw/pull/474/files","https://github.com/geopython/pycsw/commit/522873e5ce48bb9cbd4e7e8168ca881ce709c222","https://github.com/geopython/pycsw/commit/69546e13527c82e4f9191769215490381ad511b2","https://github.com/geopython/pycsw/commit/daaf09b4b920708a415be3c7f446739661ba3753","https://github.com/advisories/GHSA-hg4c-rgvm-964g","https://github.com/geopython/pycsw","https://github.com/pypa/advisory-database/tree/main/vulns/pycsw/PYSEC-2018-98.yaml","https://patch-diff.githubusercontent.com/raw/geopython/pycsw/pull/474.patch","http://seclists.org/oss-sec/2016/q4/406"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-hg4c-rgvm-964g","url":"https://osv.dev/vulnerability/GHSA-hg4c-rgvm-964g"}],"summary":"SQL Injection in pycsw"}