{"action":"Upgrade flower to 1.2.0 or later.","affected":[{"fixed":"1.2.0","introduced":"0"}],"component":"flower","cve_ids":["CVE-2022-30034"],"ecosystem":"PyPI","epss":0.01104,"exploited":false,"fixed_versions":["1.2.0"],"ghsa_id":"GHSA-q4qm-xhf9-4p8f","id":"tcs_01M5KFVAJKBD7E3YBT7281K0QB","modified_at":"2024-09-20T20:22:45.629356Z","published_at":"2022-06-03T00:01:07Z","references":["https://osv.dev/vulnerability/GHSA-q4qm-xhf9-4p8f","https://nvd.nist.gov/vuln/detail/CVE-2022-30034","https://github.com/mher/flower/issues/1217","https://github.com/mher/flower/pull/1216","https://github.com/mher/flower","https://github.com/pypa/advisory-database/tree/main/vulns/flower/PYSEC-2022-42973.yaml","https://tprynn.github.io/2022/05/26/flower-vulns.html","http://githubcommherflower.com"],"severity":{"label":"high","score":8.6},"sources":[{"source":"osv","source_id":"GHSA-q4qm-xhf9-4p8f","url":"https://osv.dev/vulnerability/GHSA-q4qm-xhf9-4p8f"}],"summary":"Flower OAuth authentication bypass"}