{"action":"Upgrade rdiffweb to 2.8.1 or later.","affected":[{"fixed":"2.8.1","introduced":"0"}],"component":"rdiffweb","cve_ids":["CVE-2023-4138"],"ecosystem":"PyPI","epss":0.00448,"exploited":false,"fixed_versions":["2.8.1"],"ghsa_id":"GHSA-wwrg-2w5j-grvx","id":"tcs_01M5KG30HF4YGTG8SAMMK9JGPA","modified_at":"2026-07-07T17:57:35.187296177Z","published_at":"2023-08-03T18:30:35Z","references":["https://osv.dev/vulnerability/GHSA-wwrg-2w5j-grvx","https://nvd.nist.gov/vuln/detail/CVE-2023-4138","https://github.com/ikus060/rdiffweb/commit/feef0d7b11d86aed29bf98c21526088117964d85","https://github.com/ikus060/rdiffweb","https://huntr.dev/bounties/1b1fa915-d588-4bb1-9e82-6a6be79befed"],"severity":{"label":"medium","score":4.2},"sources":[{"source":"osv","source_id":"GHSA-wwrg-2w5j-grvx","url":"https://osv.dev/vulnerability/GHSA-wwrg-2w5j-grvx"}],"summary":"RDiffWeb vulnerable to Allocation of Resources Without Limits or Throttling"}