{"action":"Upgrade kallithea to 0.2 or later.","affected":[{"fixed":"0.2","introduced":"0"}],"component":"kallithea","cve_ids":["CVE-2015-0260"],"ecosystem":"PyPI","epss":0.01822,"exploited":false,"fixed_versions":["0.2"],"ghsa_id":"GHSA-hhx9-4vw2-x54r","id":"tcs_01M5KFKT78V7M2E15SHDM77HVF","modified_at":"2024-09-24T21:02:04.220827Z","published_at":"2022-05-13T01:26:14Z","references":["https://osv.dev/vulnerability/GHSA-hhx9-4vw2-x54r","https://nvd.nist.gov/vuln/detail/CVE-2015-0260","https://exchange.xforce.ibmcloud.com/vulnerabilities/100888","https://github.com/pypa/advisory-database/tree/main/vulns/kallithea/PYSEC-2015-29.yaml","https://github.com/pypa/advisory-database/tree/main/vulns/rhodecode/PYSEC-2015-32.yaml","https://kallithea-scm.org/repos/kallithea/changeset/5923d74742879b812965568475e21c3496d722a9","https://kallithea-scm.org/security/cve-2015-0260.html","https://rhodecode.com/blog/rhodecode-enterprise-security-release","https://web.archive.org/web/20150321135511/http://www.securityfocus.com/bid/72573","http://seclists.org/oss-sec/2015/q1/505"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-hhx9-4vw2-x54r#PyPI/kallithea","url":"https://osv.dev/vulnerability/GHSA-hhx9-4vw2-x54r"}],"summary":"RhodeCode and Kallithea are vulnerable to sensitive information disclosure"}