{"action":"Upgrade products-genericsetup to 2.1.1 or later.","affected":[{"fixed":"2.1.1","introduced":"0"}],"component":"products-genericsetup","cve_ids":["CVE-2021-21360"],"ecosystem":"PyPI","epss":0.01549,"exploited":false,"fixed_versions":["2.1.1"],"ghsa_id":"GHSA-jff3-mwp3-f8cw","id":"tcs_01M5KGD0DJ5SKXDVES47RCTACH","modified_at":"2023-11-08T04:04:43.057991Z","published_at":"2021-03-09T01:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2021-43","https://pypi.org/project/Products.GenericSetup/","https://github.com/zopefoundation/Products.GenericSetup/security/advisories/GHSA-jff3-mwp3-f8cw","https://github.com/zopefoundation/Products.GenericSetup/commit/700319512b3615b3871a1f24e096cf66dc488c57"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2021-43","url":"https://osv.dev/vulnerability/PYSEC-2021-43"}],"summary":"Products.GenericSetup is a mini-framework for expressing the configured state of a Zope Site as a set of filesystem artifacts. In Products.GenericSetup before version 2.1.1 there is an information dis"}