{"action":"Upgrade products-pluggableauthservice to 2.6.1 or later.","affected":[{"fixed":"2.6.1","introduced":"0"}],"component":"products-pluggableauthservice","cve_ids":["CVE-2021-21337"],"ecosystem":"PyPI","epss":0.08443,"exploited":false,"fixed_versions":["2.6.1"],"ghsa_id":"GHSA-p44j-xrqg-4xrr","id":"tcs_01M5KFS86BRXYGT8BRFWE8SVM2","modified_at":"2026-07-08T06:27:50.342932580Z","published_at":"2021-03-08T21:06:23Z","references":["https://osv.dev/vulnerability/GHSA-p44j-xrqg-4xrr","https://github.com/zopefoundation/Products.PluggableAuthService/security/advisories/GHSA-p44j-xrqg-4xrr","https://nvd.nist.gov/vuln/detail/CVE-2021-21337","https://github.com/zopefoundation/Products.PluggableAuthService/commit/7eead067898852ebd3e0f143bc51295928528dfa","https://github.com/pypa/advisory-database/tree/main/vulns/products-pluggableauthservice/PYSEC-2021-45.yaml","https://github.com/zopefoundation/Products.PluggableAuthService","https://pypi.org/project/Products.PluggableAuthService","http://packetstormsecurity.com/files/162911/Products.PluggableAuthService-2.6.0-Open-Redirect.html"],"severity":{"label":"medium","score":5.7},"sources":[{"source":"osv","source_id":"GHSA-p44j-xrqg-4xrr","url":"https://osv.dev/vulnerability/GHSA-p44j-xrqg-4xrr"}],"summary":"URL Redirection to Untrusted Site ('Open Redirect') in Products.PluggableAuthService"}