{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2024.4.1"}],"component":"nebari","cve_ids":["CVE-2024-34529"],"ecosystem":"PyPI","epss":0.00353,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-vjc4-3vgx-pq9h","id":"tcs_01M5KG09MSKJAC5C2NE98Q06DK","modified_at":"2025-03-26T20:02:41.788066Z","published_at":"2024-05-06T00:30:52Z","references":["https://osv.dev/vulnerability/GHSA-vjc4-3vgx-pq9h","https://nvd.nist.gov/vuln/detail/CVE-2024-34529","https://github.com/nebari-dev/nebari/issues/2282","https://github.com/nebari-dev/nebari","https://github.com/nebari-dev/nebari/blob/5463e8df9e8d53a266a7b9d3d4e27353ec43c40b/src/_nebari/deploy.py#L71"],"severity":{"label":"medium","score":4.8},"sources":[{"source":"osv","source_id":"GHSA-vjc4-3vgx-pq9h","url":"https://osv.dev/vulnerability/GHSA-vjc4-3vgx-pq9h"}],"summary":"Nebari prints temporary Keycloak root password"}