{"action":"Upgrade srp to 1.0.17 or later.","affected":[{"fixed":"1.0.17","introduced":"0"}],"component":"srp","cve_ids":["CVE-2021-4286"],"ecosystem":"PyPI","epss":0.00738,"exploited":false,"fixed_versions":["1.0.17"],"ghsa_id":"GHSA-xmc3-9m9j-w9x4","id":"tcs_01M5KG4D2V2P11NVRJNNZCWPDJ","modified_at":"2024-10-28T14:52:55.614843Z","published_at":"2022-12-27T12:30:20Z","references":["https://osv.dev/vulnerability/GHSA-xmc3-9m9j-w9x4","https://nvd.nist.gov/vuln/detail/CVE-2021-4286","https://github.com/cocagne/pysrp/pull/43","https://github.com/cocagne/pysrp/commit/dba52642f5e95d3da7af1780561213ee6053195f","https://github.com/cocagne/pysrp","https://github.com/cocagne/pysrp/releases/tag/1.0.17","https://github.com/pypa/advisory-database/tree/main/vulns/srp/PYSEC-2022-43014.yaml","https://vuldb.com/?ctiid.216875","https://vuldb.com/?id.216875"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-xmc3-9m9j-w9x4","url":"https://osv.dev/vulnerability/GHSA-xmc3-9m9j-w9x4"}],"summary":"cocagne pysrp vulnerable to side channel leaks"}