{"action":"Upgrade buildbot to 0.7.11p3 or later.","affected":[{"fixed":"0.7.11p3","introduced":"0.7.6"}],"component":"buildbot","cve_ids":["CVE-2009-2959"],"ecosystem":"PyPI","epss":0.02008,"exploited":false,"fixed_versions":["0.7.11p3"],"ghsa_id":"GHSA-jqqh-999x-w26w","id":"tcs_01M5KFPFG82KX4VJJENDY6QPX4","modified_at":"2026-09-10T03:49:39.160640115Z","published_at":"2022-05-02T03:40:27Z","references":["https://osv.dev/vulnerability/GHSA-jqqh-999x-w26w","https://nvd.nist.gov/vuln/detail/CVE-2009-2959","https://github.com/buildbot/buildbot/commit/a08ee48e796ae66c54fca6a087b4adce7d1d6c06","https://github.com/buildbot/buildbot","https://github.com/pypa/advisory-database/tree/main/vulns/buildbot/PYSEC-2009-1.yaml","https://web.archive.org/web/20101118080215/http://www.vupen.com/english/advisories/2009/2352","https://web.archive.org/web/20111225112636/http://secunia.com/advisories/36352","https://web.archive.org/web/20111225123121/http://secunia.com/advisories/36418","https://web.archive.org/web/20200228175025/http://www.securityfocus.com/bid/36100","https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00978.html","https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00985.html","http://buildbot.net/trac#SecurityAlert","http://sourceforge.net/mailarchive/message.php?msg_name=42338fbf0908121232mb790a6cn787ac3de90e8bc31%40mail.gmail.com"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-jqqh-999x-w26w","url":"https://osv.dev/vulnerability/GHSA-jqqh-999x-w26w"}],"summary":"Buildbot Cross-site scripting (XSS) vulnerability"}