{"action":"Upgrade rucio-webui to 1.26.7 or later.","affected":[{"fixed":"1.26.7","introduced":"1.26.0"}],"component":"rucio-webui","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["1.26.7"],"ghsa_id":"GHSA-v988-828w-xvf2","id":"tcs_01M5KFZQJVJCB5RQHE5NMDT5XN","modified_at":"2025-02-13T05:31:28.532416Z","published_at":"2021-10-22T16:21:07Z","references":["https://osv.dev/vulnerability/GHSA-v988-828w-xvf2","https://github.com/rucio/rucio/security/advisories/GHSA-v988-828w-xvf2","https://github.com/rucio/rucio/issues/4810","https://github.com/rucio/rucio/issues/4928","https://github.com/rucio/rucio/commit/8f832404ae88d6300e17d7e706b40fe58e0df90c","https://github.com/rucio/rucio","https://github.com/rucio/rucio/releases/tag/1.26.7"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-v988-828w-xvf2","url":"https://osv.dev/vulnerability/GHSA-v988-828w-xvf2"}],"summary":"Authentication Bypass Using an Alternate Path or Channel and Authentication Bypass by Primary Weakness in rucio-webui"}