{"action":"Upgrade puncia to 0.21 or later.","affected":[{"fixed":"0.21","introduced":"0"}],"component":"puncia","cve_ids":["CVE-2024-41124"],"ecosystem":"PyPI","epss":0.00272,"exploited":false,"fixed_versions":["0.21"],"ghsa_id":"GHSA-rwcj-7jjp-4w38","id":"tcs_01M5KFYS0W6N14XPRAC3MQK6PP","modified_at":"2026-09-10T03:50:16.954047550Z","published_at":"2024-07-19T19:59:14Z","references":["https://osv.dev/vulnerability/GHSA-rwcj-7jjp-4w38","https://github.com/ARPSyndicate/puncia/security/advisories/GHSA-rwcj-7jjp-4w38","https://nvd.nist.gov/vuln/detail/CVE-2024-41124","https://github.com/ARPSyndicate/puncia/issues/8","https://github.com/ARPSyndicate/puncia/commit/033f3b68126eabbb2040ce16e2c3a2ce17437fbd","https://github.com/ARPSyndicate/puncia/commit/033f3b68126eabbb2040ce16e2c3a2ce17437fbd#diff-3ec6c2de51e702726b23c452e3f4a899f6f4253af9fbf5be7254a5c1407ab526","https://github.com/ARPSyndicate/puncia"],"severity":{"label":"low","score":3.8},"sources":[{"source":"osv","source_id":"GHSA-rwcj-7jjp-4w38","url":"https://osv.dev/vulnerability/GHSA-rwcj-7jjp-4w38"}],"summary":"[PUNCIA] [CWE-319] Cleartext Transmission of Sensitive Information via HTTP urls in `API_URLS`"}