{"action":"Upgrade zodb3 to 3.8.3 or later.","affected":[{"fixed":"3.8.3","introduced":"3.8"},{"fixed":"3.9.0c2","introduced":"3.9a0"}],"component":"zodb3","cve_ids":["CVE-2009-2701"],"ecosystem":"PyPI","epss":0.00971,"exploited":false,"fixed_versions":["3.8.3","3.9.0c2"],"ghsa_id":"GHSA-m52m-2qpx-9j4j","id":"tcs_01M5KFQ8G7CDVFXTPGTTSXKBTB","modified_at":"2024-11-30T05:29:39.409132Z","published_at":"2022-05-02T03:37:58Z","references":["https://osv.dev/vulnerability/GHSA-m52m-2qpx-9j4j","https://nvd.nist.gov/vuln/detail/CVE-2009-2701","https://github.com/pypa/advisory-database/tree/main/vulns/zodb3/PYSEC-2009-10.yaml","https://github.com/zopefoundation/ZODB3","https://mail.zope.org/pipermail/zope-announce/2009-September/002221.html","http://pypi.python.org/pypi/ZODB3/3.8.3","http://pypi.python.org/pypi/ZODB3/3.9.0c2"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-m52m-2qpx-9j4j","url":"https://osv.dev/vulnerability/GHSA-m52m-2qpx-9j4j"}],"summary":"Zope Object Database (ZODB) Arbitrary files reading and deletion"}