{"action":"Upgrade python-gnupg to 0.3.6 or later.","affected":[{"fixed":"0.3.6","introduced":"0"}],"component":"python-gnupg","cve_ids":["CVE-2014-1928"],"ecosystem":"PyPI","epss":0.0061,"exploited":false,"fixed_versions":["0.3.6"],"ghsa_id":"GHSA-2jc8-4r6g-282j","id":"tcs_01M5KG6G035X2AZNJ0571FF2WW","modified_at":"2023-11-08T03:57:35.672992Z","published_at":"2014-10-25T21:55:00Z","references":["https://osv.dev/vulnerability/PYSEC-2014-91","http://www.debian.org/security/2014/dsa-2946","https://code.google.com/p/python-gnupg/issues/detail?id=98","http://secunia.com/advisories/56616","http://secunia.com/advisories/59031","http://seclists.org/oss-sec/2014/q1/294","https://code.google.com/p/python-gnupg/","http://seclists.org/oss-sec/2014/q1/246","https://github.com/advisories/GHSA-2jc8-4r6g-282j"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2014-91","url":"https://osv.dev/vulnerability/PYSEC-2014-91"}],"summary":"The shell_quote function in python-gnupg 0.3.5 does not properly escape characters, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors,"}