{"action":"Upgrade slo-generator to 2.0.1 or later.","affected":[{"fixed":"2.0.1","introduced":"0"}],"component":"slo-generator","cve_ids":["CVE-2021-22557"],"ecosystem":"PyPI","epss":0.0158,"exploited":false,"fixed_versions":["2.0.1"],"ghsa_id":"GHSA-j28r-j54m-gpc4","id":"tcs_01M5KFMTYTCJPCX9E15VS6W2M6","modified_at":"2024-10-22T17:00:32.927276Z","published_at":"2021-10-05T17:53:59Z","references":["https://osv.dev/vulnerability/GHSA-j28r-j54m-gpc4","https://nvd.nist.gov/vuln/detail/CVE-2021-22557","https://github.com/google/slo-generator/pull/173","https://github.com/google/slo-generator/commit/36318beab1b85d14bb860e45bea186b184690d5d","https://github.com/google/slo-generator/releases/tag/v2.0.1","https://github.com/pypa/advisory-database/tree/main/vulns/slo-generator/PYSEC-2021-429.yaml","http://packetstormsecurity.com/files/164426/Google-SLO-Generator-2.0.0-Code-Execution.html"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-j28r-j54m-gpc4","url":"https://osv.dev/vulnerability/GHSA-j28r-j54m-gpc4"}],"summary":"Code Injection in SLO Generator"}