{"action":"Upgrade djblets to 0.7.21 or later.","affected":[{"fixed":"0.7.21","introduced":"0"}],"component":"djblets","cve_ids":["CVE-2013-4409"],"ecosystem":"PyPI","epss":0.03649,"exploited":false,"fixed_versions":["0.7.21"],"ghsa_id":"GHSA-58h8-44mg-r43x","id":"tcs_01M5KG8RWYPJKZ1BJC2AN2T0YN","modified_at":"2026-06-29T12:26:42.571816582Z","published_at":"2019-11-04T21:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2019-175","https://access.redhat.com/security/cve/cve-2013-4409","http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119820.html","http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119819.html","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4409","http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119831.html","https://security-tracker.debian.org/tracker/CVE-2013-4409","http://lists.fedoraproject.org/pipermail/package-announce/2013-November/120619.html","http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119830.html","https://exchange.xforce.ibmcloud.com/vulnerabilities/88059","http://www.securityfocus.com/bid/63029"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2019-175","url":"https://osv.dev/vulnerability/PYSEC-2019-175"}],"summary":"An eval() vulnerability exists in Python Software Foundation Djblets 0.7.21 and Beanbag Review Board before 1.7.15 when parsing JSON requests."}