{"action":"Upgrade reportlab to 3.5.55 or later.","affected":[{"fixed":"3.5.55","introduced":"0"}],"component":"reportlab","cve_ids":["CVE-2020-28463"],"ecosystem":"PyPI","epss":0.01346,"exploited":false,"fixed_versions":["3.5.55"],"ghsa_id":"GHSA-mpvw-25mg-59vx","id":"tcs_01M5KGB9HX2D1SRRT2F5AM0AQ0","modified_at":"2023-11-08T04:03:27.381559Z","published_at":"2021-02-18T16:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2021-146","https://snyk.io/vuln/SNYK-PYTHON-REPORTLAB-1022145","https://www.reportlab.com/docs/reportlab-userguide.pdf","https://github.com/advisories/GHSA-mpvw-25mg-59vx"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2021-146","url":"https://osv.dev/vulnerability/PYSEC-2021-146"}],"summary":"All versions of package reportlab are vulnerable to Server-side Request Forgery (SSRF) via img tags. In order to reduce risk, use trustedSchemes & trustedHosts (see in Reportlab's documentation) Steps"}