{"action":"Upgrade gerapy to 0.9.3 or later.","affected":[{"fixed":"0.9.3","introduced":"0"}],"component":"gerapy","cve_ids":["CVE-2020-7698"],"ecosystem":"PyPI","epss":0.01717,"exploited":false,"fixed_versions":["0.9.3"],"ghsa_id":"GHSA-g57j-q48p-9vm2","id":"tcs_01M5KGANQE7MAP9EWKRCY23SCM","modified_at":"2023-11-08T04:04:05.500610Z","published_at":"2020-07-29T13:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2020-44","https://github.com/Gerapy/Gerapy/commit/e8446605eb2424717418eae199ec7aad573da2d2","https://snyk.io/vuln/SNYK-PYTHON-GERAPY-572470","https://github.com/advisories/GHSA-g57j-q48p-9vm2"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2020-44","url":"https://osv.dev/vulnerability/PYSEC-2020-44"}],"summary":"This affects the package Gerapy from 0 and before 0.9.3. The input being passed to Popen, via the project_configure endpoint, isn’t being sanitized."}