{"action":"Upgrade rply to 0.7.1 or later.","affected":[{"fixed":"0.7.1","introduced":"0"}],"component":"rply","cve_ids":["CVE-2014-1604"],"ecosystem":"PyPI","epss":0.00354,"exploited":false,"fixed_versions":["0.7.1"],"ghsa_id":"GHSA-9gcf-pq99-rjw3","id":"tcs_01M5KG61QJJVYRJYCSXJNX2376","modified_at":"2026-07-09T16:56:20.570841183Z","published_at":"2014-01-28T00:55:00Z","references":["https://osv.dev/vulnerability/PYSEC-2014-17","http://www.openwall.com/lists/oss-security/2014/01/17/8","http://www.osvdb.org/102202","https://github.com/alex/rply/commit/fc9bbcd25b0b4f09bbd6339f710ad24c129d5d7c","http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=735263","http://secunia.com/advisories/56429","http://www.openwall.com/lists/oss-security/2014/01/18/4","https://exchange.xforce.ibmcloud.com/vulnerabilities/90593","https://github.com/advisories/GHSA-9gcf-pq99-rjw3"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2014-17","url":"https://osv.dev/vulnerability/PYSEC-2014-17"}],"summary":"The parser cache functionality in parsergenerator.py in RPLY (aka python-rply) before 0.7.1 allows local users to spoof cache data by pre-creating a temporary rply-*.json file with a predictable name."}