{"action":"Upgrade rdiffweb to 2.4.8 or later.","affected":[{"fixed":"2.4.8","introduced":"0"}],"component":"rdiffweb","cve_ids":["CVE-2022-3301"],"ecosystem":"PyPI","epss":0.00693,"exploited":false,"fixed_versions":["2.4.8"],"ghsa_id":"GHSA-qq29-5vjh-vxwr","id":"tcs_01M5KFWFV3ASP3C5441KH0TRB0","modified_at":"2024-10-25T21:41:21.980721Z","published_at":"2022-09-27T00:00:22Z","references":["https://osv.dev/vulnerability/GHSA-qq29-5vjh-vxwr","https://nvd.nist.gov/vuln/detail/CVE-2022-3301","https://github.com/ikus060/rdiffweb/commit/5ac38b2a75becbab9f948bd5e37ecbcd9f0b362e","https://github.com/ikus060/rdiffweb","https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-295.yaml","https://huntr.dev/bounties/d3bf1e5d-055a-44b8-8d60-54ab966ed63a"],"severity":{"label":"low","score":2.4},"sources":[{"source":"osv","source_id":"GHSA-qq29-5vjh-vxwr","url":"https://osv.dev/vulnerability/GHSA-qq29-5vjh-vxwr"}],"summary":"rdiffweb vulnerable to Improper Cleanup on Thrown Exception"}