{"action":"Upgrade wagtail to 2.15.2 or later.","affected":[{"fixed":"2.15.2","introduced":"2.13"}],"component":"wagtail","cve_ids":["CVE-2022-21683"],"ecosystem":"PyPI","epss":0.0097,"exploited":false,"fixed_versions":["2.15.2"],"ghsa_id":"GHSA-xqxm-2rpm-3889","id":"tcs_01M5KG4MMG9FAAYDYBPMGJ54TR","modified_at":"2024-11-19T16:22:53.380785Z","published_at":"2022-01-21T23:43:50Z","references":["https://osv.dev/vulnerability/GHSA-xqxm-2rpm-3889","https://github.com/wagtail/wagtail/security/advisories/GHSA-xqxm-2rpm-3889","https://nvd.nist.gov/vuln/detail/CVE-2022-21683","https://github.com/wagtail/wagtail/commit/5fe901e5d86ed02dbbb63039a897582951266afd","https://github.com/pypa/advisory-database/tree/main/vulns/wagtail/PYSEC-2022-13.yaml","https://github.com/wagtail/wagtail","https://github.com/wagtail/wagtail/releases/tag/v2.15.2"],"severity":{"label":"low","score":3.5},"sources":[{"source":"osv","source_id":"GHSA-xqxm-2rpm-3889","url":"https://osv.dev/vulnerability/GHSA-xqxm-2rpm-3889"}],"summary":"Comment reply notifications sent to incorrect users"}