{"action":"Upgrade products-genericsetup to 2.1.1 or later.","affected":[{"fixed":"2.1.1","introduced":"0"}],"component":"products-genericsetup","cve_ids":["CVE-2021-21360"],"ecosystem":"PyPI","epss":0.01549,"exploited":false,"fixed_versions":["2.1.1"],"ghsa_id":"GHSA-jff3-mwp3-f8cw","id":"tcs_01M5KFNPWWDQ6VEV1ZRHM6E405","modified_at":"2026-07-08T06:28:27.155222281Z","published_at":"2021-03-09T00:38:31Z","references":["https://osv.dev/vulnerability/GHSA-jff3-mwp3-f8cw","https://github.com/zopefoundation/Products.GenericSetup/security/advisories/GHSA-jff3-mwp3-f8cw","https://nvd.nist.gov/vuln/detail/CVE-2021-21360","https://github.com/zopefoundation/Products.GenericSetup/commit/700319512b3615b3871a1f24e096cf66dc488c57","https://github.com/pypa/advisory-database/tree/main/vulns/products-genericsetup/PYSEC-2021-43.yaml","https://github.com/zopefoundation/Products.GenericSetup","https://pypi.org/project/Products.GenericSetup","http://www.openwall.com/lists/oss-security/2021/05/21/1","http://www.openwall.com/lists/oss-security/2021/05/22/1"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-jff3-mwp3-f8cw","url":"https://osv.dev/vulnerability/GHSA-jff3-mwp3-f8cw"}],"summary":"Exposure of Sensitive Information to an Unauthorized Actor in Products.GenericSetup"}