{"action":"Upgrade trac to 0.11.2 or later.","affected":[{"fixed":"0.11.2","introduced":"0"}],"component":"trac","cve_ids":["CVE-2008-5647"],"ecosystem":"PyPI","epss":0.0107,"exploited":false,"fixed_versions":["0.11.2"],"ghsa_id":"GHSA-ww53-wxxr-8f9w","id":"tcs_01M5KG2ZJTTTC1Q572ZPPWQF67","modified_at":"2024-11-29T05:30:08.545991Z","published_at":"2022-05-17T02:17:20Z","references":["https://osv.dev/vulnerability/GHSA-ww53-wxxr-8f9w","https://nvd.nist.gov/vuln/detail/CVE-2008-5647","https://exchange.xforce.ibmcloud.com/vulnerabilities/46491","https://github.com/pypa/advisory-database/tree/main/vulns/trac/PYSEC-2008-7.yaml","https://web.archive.org/web/20140722200717/http://secunia.com/advisories/32652","https://web.archive.org/web/20200228023138/http://www.securityfocus.com/bid/32226","http://trac.edgewall.org/wiki/ChangeLog"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-ww53-wxxr-8f9w","url":"https://osv.dev/vulnerability/GHSA-ww53-wxxr-8f9w"}],"summary":"Trac has vulnerability in HTML sanitizer filter"}