{"action":"Upgrade pypiserver to 1.2.6 or later.","affected":[{"fixed":"1.2.6","introduced":"0"}],"component":"pypiserver","cve_ids":["CVE-2019-6802"],"ecosystem":"PyPI","epss":0.03802,"exploited":false,"fixed_versions":["1.2.6"],"ghsa_id":"GHSA-mh24-7wvg-v88g","id":"tcs_01M5KFR3905CDSARDYFAS9VVXT","modified_at":"2024-10-15T16:27:23.942956Z","published_at":"2019-01-30T20:56:26Z","references":["https://osv.dev/vulnerability/GHSA-mh24-7wvg-v88g","https://nvd.nist.gov/vuln/detail/CVE-2019-6802","https://github.com/pypiserver/pypiserver/issues/237","https://github.com/pypiserver/pypiserver/commit/1375a67c55a9b8d4619df30d2a1c0b239d7357e6","https://github.com/pypa/advisory-database/tree/main/vulns/pypiserver/PYSEC-2019-113.yaml","https://github.com/pypiserver/pypiserver"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-mh24-7wvg-v88g","url":"https://osv.dev/vulnerability/GHSA-mh24-7wvg-v88g"}],"summary":"CRLF Injection in pypiserver"}