{"action":"Upgrade b2sdk to 1.14.1 or later.","affected":[{"fixed":"1.14.1","introduced":"0"}],"component":"b2sdk","cve_ids":["CVE-2022-23651"],"ecosystem":"PyPI","epss":0.00217,"exploited":false,"fixed_versions":["1.14.1"],"ghsa_id":"GHSA-p867-fxfr-ph2w","id":"tcs_01M5KFSMQTPY4Q67D6PX1CNW22","modified_at":"2024-09-04T21:01:50.239481Z","published_at":"2022-02-24T12:08:24Z","references":["https://osv.dev/vulnerability/GHSA-p867-fxfr-ph2w","https://github.com/Backblaze/b2-sdk-python/security/advisories/GHSA-p867-fxfr-ph2w","https://nvd.nist.gov/vuln/detail/CVE-2022-23651","https://github.com/Backblaze/b2-sdk-python/commit/62476638986e5b6d7459aca5ef8ce220760226e0","https://github.com/Backblaze/b2-sdk-python","https://github.com/pypa/advisory-database/tree/main/vulns/b2sdk/PYSEC-2022-33.yaml","https://pypi.org/project/b2sdk"],"severity":{"label":"medium","score":4.7},"sources":[{"source":"osv","source_id":"GHSA-p867-fxfr-ph2w","url":"https://osv.dev/vulnerability/GHSA-p867-fxfr-ph2w"}],"summary":"b2-sdk-python TOCTOU application key disclosure"}