{"action":"Upgrade docassemble to 1.2.65 or later.","affected":[{"fixed":"1.2.65","introduced":"0"}],"component":"docassemble","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["1.2.65"],"ghsa_id":"GHSA-qrmm-w4v4-q7f8","id":"tcs_01M5KFWMD1D61P001QR43QKAHZ","modified_at":"2026-09-10T03:49:14.990661136Z","published_at":"2021-05-06T15:27:22Z","references":["https://osv.dev/vulnerability/GHSA-qrmm-w4v4-q7f8","https://github.com/jhpyle/docassemble/security/advisories/GHSA-qrmm-w4v4-q7f8"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-qrmm-w4v4-q7f8","url":"https://osv.dev/vulnerability/GHSA-qrmm-w4v4-q7f8"}],"summary":"Unauthorized access through URL manipulation"}