{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"openvpn-monitor","cve_ids":["CVE-2021-31606"],"ecosystem":"PyPI","epss":0.0255,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-5w5c-3g26-8mmc","id":"tcs_01M5KGCHWTM6JRE22X2NSFPYZW","modified_at":"2026-06-10T17:02:27.530165629Z","published_at":"2021-09-27T06:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2021-354","http://packetstormsecurity.com/files/164274/OpenVPN-Monitor-1.1.3-Authorization-Bypass-Denial-Of-Service.html","https://github.com/furlongm/openvpn-monitor/releases","https://github.com/advisories/GHSA-5w5c-3g26-8mmc"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2021-354","url":"https://osv.dev/vulnerability/PYSEC-2021-354"}],"summary":"furlongm openvpn-monitor through 1.1.3 allows Authorization Bypass to disconnect arbitrary clients."}