{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.8.2"}],"component":"boxlite","cve_ids":["CVE-2026-47213"],"ecosystem":"PyPI","epss":0.00268,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-xjhv-pp2r-6f82","id":"tcs_01M5KG4ATGFP0WZYZ7J2AJYHAY","modified_at":"2026-09-10T03:50:48.045090024Z","published_at":"2026-05-29T21:45:55Z","references":["https://osv.dev/vulnerability/GHSA-xjhv-pp2r-6f82","https://github.com/boxlite-ai/boxlite/security/advisories/GHSA-xjhv-pp2r-6f82","https://nvd.nist.gov/vuln/detail/CVE-2026-47213","https://github.com/boxlite-ai/boxlite/commit/28159fc5b6b6fd5037e18a58fc4644c882e3c581","https://github.com/boxlite-ai/boxlite"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-xjhv-pp2r-6f82","url":"https://osv.dev/vulnerability/GHSA-xjhv-pp2r-6f82"}],"summary":"BoxLite has a Timeout Bypass Vulnerability"}