{"action":"Upgrade flask-appbuilder to 3.3.2 or later.","affected":[{"fixed":"3.3.2","introduced":"0"}],"component":"flask-appbuilder","cve_ids":["CVE-2021-32805"],"ecosystem":"PyPI","epss":0.007,"exploited":false,"fixed_versions":["3.3.2"],"ghsa_id":"GHSA-624f-cqvr-3qw4","id":"tcs_01M5KGCJP1DMPZ5W4N01M39K7G","modified_at":"2023-11-08T04:06:00.588656Z","published_at":"2021-09-08T18:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2021-359","https://github.com/dpgaspar/Flask-AppBuilder/security/advisories/GHSA-624f-cqvr-3qw4","https://github.com/dpgaspar/Flask-AppBuilder/commit/6af28521589599b1dbafd6313256229ee9a4fa74"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2021-359","url":"https://osv.dev/vulnerability/PYSEC-2021-359"}],"summary":"Flask-AppBuilder is an application development framework, built on top of Flask. In affected versions if using Flask-AppBuilder OAuth, an attacker can share a carefully crafted URL with a trusted doma"}