{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0.7"}],"component":"scrapy","cve_ids":["CVE-2017-14158"],"ecosystem":"PyPI","epss":0.02605,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-h7wm-ph43-c39p","id":"tcs_01M5KG7HRP094SDPM5W83GBQ5F","modified_at":"2025-10-09T05:30:09.620373Z","published_at":"2017-09-05T17:29:00Z","references":["https://osv.dev/vulnerability/PYSEC-2017-83","https://github.com/scrapy/scrapy/issues/482","http://blog.csdn.net/wangtua/article/details/75228728","https://github.com/advisories/GHSA-h7wm-ph43-c39p"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"PYSEC-2017-83","url":"https://osv.dev/vulnerability/PYSEC-2017-83"},{"source":"nvd","source_id":"CVE-2017-14158","url":"https://nvd.nist.gov/vuln/detail/CVE-2017-14158"}],"summary":"Scrapy 1.4 allows remote attackers to cause a denial of service (memory consumption) via large files because arbitrarily many files are read into memory, which is especially problematic if the files a"}