{"action":"Upgrade django-markupfield to 1.3.2 or later.","affected":[{"fixed":"1.3.2","introduced":"0"}],"component":"django-markupfield","cve_ids":["CVE-2015-0846"],"ecosystem":"PyPI","epss":0.01794,"exploited":false,"fixed_versions":["1.3.2"],"ghsa_id":"GHSA-wxmr-7xjv-8xqw","id":"tcs_01M5KG33RAS4QXJG1M9D63A9RS","modified_at":"2025-02-17T05:28:00.988158Z","published_at":"2022-05-17T04:13:43Z","references":["https://osv.dev/vulnerability/GHSA-wxmr-7xjv-8xqw","https://nvd.nist.gov/vuln/detail/CVE-2015-0846","https://github.com/jamesturk/django-markupfield/commit/b45734ea1d206abc1ed2a90bdc779708066d49f3","https://github.com/jamesturk/django-markupfield","https://github.com/jamesturk/django-markupfield/blob/1.3.3/CHANGELOG","https://github.com/jamesturk/django-markupfield/blob/master/CHANGELOG","https://github.com/pypa/advisory-database/tree/main/vulns/django-markupfield/PYSEC-2015-12.yaml","https://www.djangoproject.com/weblog/2015/apr/21/docutils-security-advisory","http://www.debian.org/security/2015/dsa-3230"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-wxmr-7xjv-8xqw","url":"https://osv.dev/vulnerability/GHSA-wxmr-7xjv-8xqw"}],"summary":"django-markupfield Arbitrary File Read"}