{"action":"Upgrade django-sendfile2 to 0.7.0 or later.","affected":[{"fixed":"0.7.0","introduced":"0"}],"component":"django-sendfile2","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["0.7.0"],"ghsa_id":"GHSA-pcjh-6r5h-r92r","id":"tcs_01M5KFSTB136G93EJ2P7ZJ2GTN","modified_at":"2024-12-03T06:06:56.847569Z","published_at":"2022-08-11T18:12:35Z","references":["https://osv.dev/vulnerability/GHSA-pcjh-6r5h-r92r","https://github.com/moggers87/django-sendfile2/security/advisories/GHSA-pcjh-6r5h-r92r","https://github.com/moggers87/django-sendfile2/commit/4c370859023292e3715200a57843f86c5ef3cd77","https://github.com/moggers87/django-sendfile2","https://github.com/moggers87/django-sendfile2/releases/tag/v0.7.0"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-pcjh-6r5h-r92r","url":"https://osv.dev/vulnerability/GHSA-pcjh-6r5h-r92r"}],"summary":"django-sendfile2 before 0.7.0 contains reflected file download vulnerability"}