{"action":"Upgrade scrapy-splash to 0.8.0 or later.","affected":[{"fixed":"0.8.0","introduced":"0"}],"component":"scrapy-splash","cve_ids":["CVE-2021-41124"],"ecosystem":"PyPI","epss":0.01122,"exploited":false,"fixed_versions":["0.8.0"],"ghsa_id":"GHSA-823f-cwm9-4g74","id":"tcs_01M5KGCKHTTW948H8WABSBBRFC","modified_at":"2023-11-08T04:06:51.977544Z","published_at":"2021-10-05T21:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2021-364","https://github.com/scrapy-plugins/scrapy-splash/commit/2b253e57fe64ec575079c8cdc99fe2013502ea31","https://github.com/scrapy-plugins/scrapy-splash/security/advisories/GHSA-823f-cwm9-4g74"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2021-364","url":"https://osv.dev/vulnerability/PYSEC-2021-364"}],"summary":"Scrapy-splash is a library which provides Scrapy and JavaScript integration. In affected versions users who use [`HttpAuthMiddleware`](http://doc.scrapy.org/en/latest/topics/downloader-middleware.html"}