{"action":"Upgrade tendenci to 12.0.11 or later.","affected":[{"fixed":"12.0.11","introduced":"0"}],"component":"tendenci","cve_ids":["CVE-2020-14942"],"ecosystem":"PyPI","epss":0.0135,"exploited":false,"fixed_versions":["12.0.11"],"ghsa_id":"GHSA-jqmc-fxxp-r589","id":"tcs_01M5KG9BT91F0CS4Y0M3N6H852","modified_at":"2023-11-08T04:02:27.888375Z","published_at":"2020-06-21T15:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2020-112","https://github.com/tendenci/tendenci/issues/867","https://github.com/advisories/GHSA-jqmc-fxxp-r589"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2020-112","url":"https://osv.dev/vulnerability/PYSEC-2020-112"}],"summary":"Tendenci 12.0.10 allows unrestricted deserialization in apps\\helpdesk\\views\\staff.py."}