{"action":"Upgrade autobahn to 20.12.3 or later.","affected":[{"fixed":"20.12.3","introduced":"0"}],"component":"autobahn","cve_ids":["CVE-2020-35678"],"ecosystem":"PyPI","epss":0.01443,"exploited":false,"fixed_versions":["20.12.3"],"ghsa_id":"GHSA-gwp7-vqr5-h33h","id":"tcs_01M5KGA1EXK88J367NWEZMYCCZ","modified_at":"2023-11-08T04:03:35.306822Z","published_at":"2020-12-27T00:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2020-25","https://github.com/crossbario/autobahn-python/compare/v20.12.2...v20.12.3","https://github.com/crossbario/autobahn-python","https://github.com/crossbario/autobahn-python/pull/1439","https://pypi.org/project/autobahn/20.12.3/","https://autobahn.readthedocs.io/en/latest/changelog.html","https://github.com/advisories/GHSA-gwp7-vqr5-h33h"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2020-25","url":"https://osv.dev/vulnerability/PYSEC-2020-25"}],"summary":"Autobahn|Python before 20.12.3 allows redirect header injection."}