{"action":"Upgrade products-pluggableauthservice to 2.6.1 or later.","affected":[{"fixed":"2.6.1","introduced":"0"}],"component":"products-pluggableauthservice","cve_ids":["CVE-2021-21337"],"ecosystem":"PyPI","epss":0.08443,"exploited":false,"fixed_versions":["2.6.1"],"ghsa_id":"GHSA-p44j-xrqg-4xrr","id":"tcs_01M5KGD474ETAYF710ZAD32XAW","modified_at":"2023-11-08T04:04:41.823807Z","published_at":"2021-03-08T21:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2021-45","https://github.com/zopefoundation/Products.PluggableAuthService/security/advisories/GHSA-p44j-xrqg-4xrr","https://pypi.org/project/Products.PluggableAuthService/","https://github.com/zopefoundation/Products.PluggableAuthService/commit/7eead067898852ebd3e0f143bc51295928528dfa"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2021-45","url":"https://osv.dev/vulnerability/PYSEC-2021-45"}],"summary":"Products.PluggableAuthService is a pluggable Zope authentication and authorization framework. In Products.PluggableAuthService before version 2.6.0 there is an open redirect vulnerability. A malicious"}