{"action":"Upgrade planet to 2.0.1 or later.","affected":[{"fixed":"2.0.1","introduced":"0"}],"component":"planet","cve_ids":["CVE-2023-32303"],"ecosystem":"PyPI","epss":0.00252,"exploited":false,"fixed_versions":["2.0.1"],"ghsa_id":"GHSA-j5fj-rfh6-qj85","id":"tcs_01M5KFN50H249S0F46C6DY32S5","modified_at":"2024-10-14T18:38:49.950180Z","published_at":"2023-05-12T20:55:36Z","references":["https://osv.dev/vulnerability/GHSA-j5fj-rfh6-qj85","https://github.com/planetlabs/planet-client-python/security/advisories/GHSA-j5fj-rfh6-qj85","https://nvd.nist.gov/vuln/detail/CVE-2023-32303","https://github.com/planetlabs/planet-client-python/commit/d71415a83119c5e89d7b80d5f940d162376ee3b7","https://github.com/planetlabs/planet-client-python","https://github.com/planetlabs/planet-client-python/releases/tag/2.0.1","https://github.com/pypa/advisory-database/tree/main/vulns/planet/PYSEC-2023-71.yaml"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-j5fj-rfh6-qj85","url":"https://osv.dev/vulnerability/GHSA-j5fj-rfh6-qj85"}],"summary":"Planet's secret file is created with excessive permissions"}