{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"openvpn-monitor","cve_ids":["CVE-2021-31605"],"ecosystem":"PyPI","epss":0.03341,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-4258-vcjw-wwxx","id":"tcs_01M5KGCHQTTEYGM2YV7QPRCHJ9","modified_at":"2026-06-10T17:02:24.857814656Z","published_at":"2021-09-27T06:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2021-353","http://packetstormsecurity.com/files/164278/OpenVPN-Monitor-1.1.3-Command-Injection.html","https://github.com/furlongm/openvpn-monitor/releases","https://github.com/advisories/GHSA-4258-vcjw-wwxx"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2021-353","url":"https://osv.dev/vulnerability/PYSEC-2021-353"}],"summary":"furlongm openvpn-monitor through 1.1.3 allows %0a command injection via the OpenVPN management interface socket. This can shut down the server via signal%20SIGTERM."}