{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"topydo","cve_ids":["CVE-2018-1000523"],"ecosystem":"PyPI","epss":0.01165,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-h6h9-pphv-m266","id":"tcs_01M5KG86150R00DEHX189G2RMQ","modified_at":"2025-10-09T05:34:19.294491Z","published_at":"2018-06-26T16:29:00Z","references":["https://osv.dev/vulnerability/PYSEC-2018-76","https://github.com/bram85/topydo/issues/240","https://github.com/bram85/topydo/blob/master/topydo/lib/ListFormat.py#L292","https://github.com/advisories/GHSA-h6h9-pphv-m266"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2018-76","url":"https://osv.dev/vulnerability/PYSEC-2018-76"}],"summary":"topydo contains a CWE-20: Improper Input Validation vulnerability in ListFormatParser::parse, file topydo/lib/ListFormat.py line 292 as of d4f843dac71308b2f29a7c2cdc76f055c3841523 that can result in I"}