{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"openvpn-monitor","cve_ids":["CVE-2021-31604"],"ecosystem":"PyPI","epss":0.00683,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-vw35-c8hf-fwmq","id":"tcs_01M5KGCHJQDE8QZE97GEETW00A","modified_at":"2026-06-10T17:02:24.814493825Z","published_at":"2021-09-27T06:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2021-352","http://packetstormsecurity.com/files/164281/OpenVPN-Monitor-1.1.3-Cross-Site-Request-Forgery.html","https://github.com/furlongm/openvpn-monitor/releases","https://github.com/advisories/GHSA-vw35-c8hf-fwmq"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2021-352","url":"https://osv.dev/vulnerability/PYSEC-2021-352"}],"summary":"furlongm openvpn-monitor through 1.1.3 allows CSRF to disconnect an arbitrary client."}