{"action":"Upgrade cg to 60.2.12 or later.","affected":[{"fixed":"60.2.12","introduced":"0"}],"component":"cg","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["60.2.12"],"ghsa_id":"GHSA-w228-rfpx-fhm4","id":"tcs_01M5KG15HBENNN1131S3BNDQMG","modified_at":"2024-12-06T05:43:58.698245Z","published_at":"2024-04-23T16:21:22Z","references":["https://osv.dev/vulnerability/GHSA-w228-rfpx-fhm4","https://github.com/Clinical-Genomics/cg/security/advisories/GHSA-w228-rfpx-fhm4","https://github.com/Clinical-Genomics/cg/commit/96e6a968a5a3639cc40ad251ad65952e4f38dd25","https://github.com/Clinical-Genomics/cg","https://github.com/Clinical-Genomics/cg/blob/master/cg/server/invoices/views.py#L173"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-w228-rfpx-fhm4","url":"https://osv.dev/vulnerability/GHSA-w228-rfpx-fhm4"}],"summary":"cg vulnerable to an Open Redirect Vulnerability on Referer Header"}