{"action":"Upgrade qutebrowser to 1.8.0 or later.","affected":[{"fixed":"1.8.0","introduced":"0"},{"fixed":"2.4.0","introduced":"2.0.0"}],"component":"qutebrowser","cve_ids":["CVE-2021-41146"],"ecosystem":"PyPI","epss":0.01496,"exploited":false,"fixed_versions":["1.8.0","2.4.0"],"ghsa_id":"GHSA-vw27-fwjf-5qxm","id":"tcs_01M5KGCPYV81EYJ596QP9BQ1AC","modified_at":"2023-11-08T04:06:52.852418Z","published_at":"2021-10-21T18:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2021-382","https://github.com/qutebrowser/qutebrowser/security/advisories/GHSA-vw27-fwjf-5qxm","https://github.com/qutebrowser/qutebrowser/commit/8f46ba3f6dc7b18375f7aa63c48a1fe461190430"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2021-382","url":"https://osv.dev/vulnerability/PYSEC-2021-382"}],"summary":"qutebrowser is an open source keyboard-focused browser with a minimal GUI. Starting with qutebrowser v1.7.0, the Windows installer for qutebrowser registers a `qutebrowserurl:` URL handler. With certa"}