{"action":"Upgrade paste to 1.7.4 or later.","affected":[{"fixed":"1.7.4","introduced":"0"}],"component":"paste","cve_ids":["CVE-2010-2477"],"ecosystem":"PyPI","epss":0.02288,"exploited":false,"fixed_versions":["1.7.4"],"ghsa_id":"GHSA-7gfc-2v6g-6w9f","id":"tcs_01M5KG5CS3AWFAWCZM2S7F1V6F","modified_at":"2026-06-10T17:02:28.961772863Z","published_at":"2010-11-06T00:00:00Z","references":["https://osv.dev/vulnerability/PYSEC-2010-29","http://pylonshq.com/articles/archives/2010/6/paste_174_released_addresses_xss_security_hole","http://groups.google.com/group/pylons-discuss/msg/8c256dc076a408d8?dmode=source&output=gplain","http://marc.info/?l=oss-security&m=127792576822169&w=2","http://marc.info/?l=oss-security&m=127785414818815&w=2","http://bitbucket.org/ianb/paste/changeset/fcae59df8b56","http://secunia.com/advisories/42500","http://www.securityfocus.com/bid/41160","http://groups.google.com/group/paste-users/browse_thread/thread/3b3fff3dadd0b1e5?pli=1","http://www.ubuntu.com/usn/USN-1026-1","https://github.com/advisories/GHSA-7gfc-2v6g-6w9f"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2010-29","url":"https://osv.dev/vulnerability/PYSEC-2010-29"}],"summary":"Multiple cross-site scripting (XSS) vulnerabilities in the paste.httpexceptions implementation in Paste before 1.7.4 allow remote attackers to inject arbitrary web script or HTML via vectors involving"}