{"action":"Upgrade products-pluggableauthservice to 2.6.0 or later.","affected":[{"fixed":"2.6.0","introduced":"0"}],"component":"products-pluggableauthservice","cve_ids":["CVE-2021-21336"],"ecosystem":"PyPI","epss":0.01499,"exploited":false,"fixed_versions":["2.6.0"],"ghsa_id":"GHSA-p75f-g7gx-2r7p","id":"tcs_01M5KGD2DPW7TQDYW4S9K7CWTJ","modified_at":"2023-11-08T04:04:41.761487Z","published_at":"2021-03-08T21:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2021-44","https://github.com/zopefoundation/Products.PluggableAuthService/security/advisories/GHSA-p75f-g7gx-2r7p","https://pypi.org/project/Products.PluggableAuthService/","https://github.com/zopefoundation/Products.PluggableAuthService/commit/2dad81128250cb2e5d950cddc9d3c0314a80b4bb"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2021-44","url":"https://osv.dev/vulnerability/PYSEC-2021-44"}],"summary":"Products.PluggableAuthService is a pluggable Zope authentication and authorization framework. In Products.PluggableAuthService before version 2.6.0 there is an information disclosure vulnerability - e"}