{"action":"Upgrade trac to 0.9.6 or later.","affected":[{"fixed":"0.9.6","introduced":"0"}],"component":"trac","cve_ids":["CVE-2006-3695"],"ecosystem":"PyPI","epss":0.01899,"exploited":false,"fixed_versions":["0.9.6"],"ghsa_id":"GHSA-r524-c2gf-5chr","id":"tcs_01M5KFX77A9ZZKNEYSN57TSWGG","modified_at":"2024-11-18T20:58:27.119957Z","published_at":"2022-05-01T07:11:38Z","references":["https://osv.dev/vulnerability/GHSA-r524-c2gf-5chr","https://nvd.nist.gov/vuln/detail/CVE-2006-3695","https://exchange.xforce.ibmcloud.com/vulnerabilities/27706","https://exchange.xforce.ibmcloud.com/vulnerabilities/27708","https://github.com/pypa/advisory-database/tree/main/vulns/trac/PYSEC-2006-2.yaml","https://web.archive.org/web/20061227230548/http://trac.edgewall.org/wiki/ChangeLog","https://web.archive.org/web/20140804165436/http://secunia.com/advisories/21534","https://web.archive.org/web/20140806223337/http://secunia.com/advisories/20958","https://web.archive.org/web/20200228034827/http://www.securityfocus.com/bid/18323","http://trac.edgewall.org/wiki/ChangeLog","http://www.debian.org/security/2006/dsa-1152"],"severity":{"label":"critical","score":9.4},"sources":[{"source":"osv","source_id":"GHSA-r524-c2gf-5chr","url":"https://osv.dev/vulnerability/GHSA-r524-c2gf-5chr"}],"summary":"Trac reStructuredText breach of privacy and denial of service vulnerability"}