{"action":"Upgrade werkzeug to 0.15.3 or later.","affected":[{"fixed":"0.15.3","introduced":"0"}],"component":"werkzeug","cve_ids":["CVE-2019-14806"],"ecosystem":"PyPI","epss":0.01909,"exploited":false,"fixed_versions":["0.15.3"],"ghsa_id":"GHSA-gq9m-qvpx-68hc","id":"tcs_01M5KG8J2N1N26VHTKY7RZR7TY","modified_at":"2023-11-08T04:01:10.893476Z","published_at":"2019-08-09T15:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2019-140","https://github.com/pallets/werkzeug/commit/00bc43b1672e662e5e3b8cecd79e67fc968fa246","https://github.com/pallets/werkzeug/blob/7fef41b120327d3912fbe12fb64f1951496fcf3e/src/werkzeug/debug/__init__.py#L168","https://palletsprojects.com/blog/werkzeug-0-15-3-released/","http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00034.html","http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00047.html","https://github.com/advisories/GHSA-gq9m-qvpx-68hc"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2019-140","url":"https://osv.dev/vulnerability/PYSEC-2019-140"}],"summary":"Pallets Werkzeug before 0.15.3, when used with Docker, has insufficient debugger PIN randomness because Docker containers share the same machine id."}