{"action":"Upgrade pyro to 3.15 or later.","affected":[{"fixed":"3.15","introduced":"0"}],"component":"pyro","cve_ids":["CVE-2011-2765"],"ecosystem":"PyPI","epss":0.02207,"exploited":false,"fixed_versions":["3.15"],"ghsa_id":"GHSA-xrr4-74mc-rpjc","id":"tcs_01M5KG8AB7MHAPTDCQBKM27VGK","modified_at":"2023-11-08T03:57:00.374823Z","published_at":"2018-08-20T13:29:00Z","references":["https://osv.dev/vulnerability/PYSEC-2018-99","https://pythonhosted.org/Pyro/12-changes.html","https://github.com/irmen/Pyro3/commit/554e095a62c4412c91f981e72fd34a936ac2bf1e","https://bugs.debian.org/631912","https://github.com/advisories/GHSA-xrr4-74mc-rpjc"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2018-99","url":"https://osv.dev/vulnerability/PYSEC-2018-99"}],"summary":"pyro before 3.15 unsafely handles pid files in temporary directory locations and opening the pid file as root. An attacker can use this flaw to overwrite arbitrary files via symlinks."}