{"action":"Upgrade django-helpdesk to 0.3.1 or later.","affected":[{"fixed":"0.3.1","introduced":"0"}],"component":"django-helpdesk","cve_ids":["CVE-2021-3950"],"ecosystem":"PyPI","epss":0.00803,"exploited":false,"fixed_versions":["0.3.1"],"ghsa_id":"GHSA-vfrc-ggmc-5jwv","id":"tcs_01M5KGD0R4Q12Z90Q3Z3YSPDPV","modified_at":"2023-11-08T04:06:36.200957Z","published_at":"2021-11-19T12:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2021-431","https://github.com/django-helpdesk/django-helpdesk/commit/04483bdac3b5196737516398b5ce0383875a5c60","https://huntr.dev/bounties/4d7a5fdd-b2de-467a-ade0-3f2fb386638e","https://github.com/advisories/GHSA-vfrc-ggmc-5jwv"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2021-431","url":"https://osv.dev/vulnerability/PYSEC-2021-431"}],"summary":"django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}