{"action":"Upgrade safeurl-python to 1.2 or later.","affected":[{"fixed":"1.2","introduced":"0"}],"component":"safeurl-python","cve_ids":["CVE-2023-24622"],"ecosystem":"PyPI","epss":0.00563,"exploited":false,"fixed_versions":["1.2"],"ghsa_id":"GHSA-jgh8-vchw-q3g7","id":"tcs_01M5KFNW4K64R95249KNC8HDW8","modified_at":"2026-05-04T09:00:06.247070719Z","published_at":"2023-01-27T01:04:27Z","references":["https://osv.dev/vulnerability/GHSA-jgh8-vchw-q3g7","https://github.com/IncludeSecurity/safeurl-python/security/advisories/GHSA-jgh8-vchw-q3g7","https://github.com/IncludeSecurity/safeurl-python/pull/5/commits/42dd0c8e5fc84e17e1d3578d18aaea169eece474","https://github.com/IncludeSecurity/safeurl-python","https://github.com/pypa/advisory-database/tree/main/vulns/safeurl-python/PYSEC-2023-298.yaml"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-jgh8-vchw-q3g7","url":"https://osv.dev/vulnerability/GHSA-jgh8-vchw-q3g7"}],"summary":"safeurl-python contains Server-Side Request Forgery"}