{"action":"Upgrade products-isurlinportal to 1.2.0 or later.","affected":[{"fixed":"1.2.0","introduced":"0"}],"component":"products-isurlinportal","cve_ids":["CVE-2021-32806"],"ecosystem":"PyPI","epss":0.01028,"exploited":false,"fixed_versions":["1.2.0"],"ghsa_id":"GHSA-q3m9-9fj2-mfwr","id":"tcs_01M5KFV64S8490WZBJG14135PC","modified_at":"2026-07-08T06:28:00.985552837Z","published_at":"2021-08-05T17:02:12Z","references":["https://osv.dev/vulnerability/GHSA-q3m9-9fj2-mfwr","https://github.com/plone/Products.isurlinportal/security/advisories/GHSA-q3m9-9fj2-mfwr","https://nvd.nist.gov/vuln/detail/CVE-2021-32806","https://github.com/plone/Products.isurlinportal/commit/d4fd34990d18adf05a10dc5e2bb4b066798280ba","https://github.com/plone/Products.isurlinportal","https://github.com/pypa/advisory-database/tree/main/vulns/products-isurlinportal/PYSEC-2021-323.yaml","http://jvn.jp/en/jp/JVN50804280/index.html"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-q3m9-9fj2-mfwr","url":"https://osv.dev/vulnerability/GHSA-q3m9-9fj2-mfwr"}],"summary":"URL Redirection to Untrusted Site ('Open Redirect') in Products.isurlinportal"}