{"action":"Upgrade products-pluggableauthservice to 2.6.0 or later.","affected":[{"fixed":"2.6.0","introduced":"0"}],"component":"products-pluggableauthservice","cve_ids":["CVE-2021-21336"],"ecosystem":"PyPI","epss":0.01499,"exploited":false,"fixed_versions":["2.6.0"],"ghsa_id":"GHSA-p75f-g7gx-2r7p","id":"tcs_01M5KFSJJ87S9JCGA35XM51DF1","modified_at":"2026-07-08T06:29:24.826616013Z","published_at":"2021-03-08T20:38:35Z","references":["https://osv.dev/vulnerability/GHSA-p75f-g7gx-2r7p","https://github.com/zopefoundation/Products.PluggableAuthService/security/advisories/GHSA-p75f-g7gx-2r7p","https://nvd.nist.gov/vuln/detail/CVE-2021-21336","https://github.com/zopefoundation/Products.PluggableAuthService/commit/2dad81128250cb2e5d950cddc9d3c0314a80b4bb","https://github.com/pypa/advisory-database/tree/main/vulns/products-pluggableauthservice/PYSEC-2021-44.yaml","https://github.com/zopefoundation/Products.PluggableAuthService","https://pypi.org/project/Products.PluggableAuthService","http://www.openwall.com/lists/oss-security/2021/05/21/1","http://www.openwall.com/lists/oss-security/2021/05/22/1"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-p75f-g7gx-2r7p","url":"https://osv.dev/vulnerability/GHSA-p75f-g7gx-2r7p"}],"summary":"Exposure of Sensitive Information to an Unauthorized Actor in Products.PluggableAuthService ZODBRoleManager"}