{"action":"Upgrade trac to 0.11.6 or later.","affected":[{"fixed":"0.11.6","introduced":"0"}],"component":"trac","cve_ids":["CVE-2009-4405"],"ecosystem":"PyPI","epss":0.01968,"exploited":false,"fixed_versions":["0.11.6"],"ghsa_id":"GHSA-f9qv-j5g6-g5cr","id":"tcs_01M5KG58H0NDEKAMY75E0GQ6YV","modified_at":"2026-06-10T17:02:45.532193255Z","published_at":"2009-12-23T21:30:00Z","references":["https://osv.dev/vulnerability/PYSEC-2009-7","http://trac.edgewall.org/browser/tags/trac-0.11.6/RELEASE","https://bugzilla.redhat.com/show_bug.cgi?id=542394","http://www.vupen.com/english/advisories/2009/3615","http://secunia.com/advisories/37901","http://secunia.com/advisories/37807","https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01169.html","https://exchange.xforce.ibmcloud.com/vulnerabilities/54983","https://github.com/advisories/GHSA-f9qv-j5g6-g5cr"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2009-7","url":"https://osv.dev/vulnerability/PYSEC-2009-7"}],"summary":"Multiple unspecified vulnerabilities in Trac before 0.11.6 have unknown impact and attack vectors, possibly related to (1) \"policy checks in report results when using alternate formats\" or (2) a \"chec"}