{"action":"Upgrade openapi-python-client to 0.5.3 or later.","affected":[{"fixed":"0.5.3","introduced":"0"}],"component":"openapi-python-client","cve_ids":["CVE-2020-15141"],"ecosystem":"PyPI","epss":0.01137,"exploited":false,"fixed_versions":["0.5.3"],"ghsa_id":"GHSA-7wgr-7666-7pwj","id":"tcs_01M5KGATPGM92MQ82BM8JAKZ78","modified_at":"2023-11-08T04:02:30.943540Z","published_at":"2020-08-14T17:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2020-70","https://github.com/triaxtec/openapi-python-client/commit/3e7dfae5d0b3685abf1ede1bc6c086a116ac4746","https://github.com/triaxtec/openapi-python-client/blob/main/CHANGELOG.md#053---2020-08-13","https://github.com/triaxtec/openapi-python-client/security/advisories/GHSA-7wgr-7666-7pwj","https://pypi.org/project/openapi-python-client"],"severity":{"label":"medium","score":4.1},"sources":[{"source":"osv","source_id":"PYSEC-2020-70","url":"https://osv.dev/vulnerability/PYSEC-2020-70"},{"source":"nvd","source_id":"CVE-2020-15141","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-15141"}],"summary":"In openapi-python-client before version 0.5.3, there is a path traversal vulnerability. If a user generated a client using a maliciously crafted OpenAPI document, it is possible for generated files to"}