{"action":"Upgrade invenio-drafts-resources to 0.13.7 or later.","affected":[{"fixed":"0.13.7","introduced":"0"},{"fixed":"0.14.6","introduced":"0.14.0"}],"component":"invenio-drafts-resources","cve_ids":["CVE-2021-43781"],"ecosystem":"PyPI","epss":0.00684,"exploited":false,"fixed_versions":["0.13.7","0.14.6"],"ghsa_id":"GHSA-xr38-w74q-r8jv","id":"tcs_01M5KGFHMKPD1NGXK9G278SZH9","modified_at":"2023-11-08T04:07:11.815387Z","published_at":"2021-12-06T18:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2021-836","https://github.com/inveniosoftware/invenio-drafts-resources/commit/039b0cff1ad4b952000f4d8c3a93f347108b6626","https://github.com/inveniosoftware/invenio-drafts-resources/security/advisories/GHSA-xr38-w74q-r8jv"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2021-836","url":"https://osv.dev/vulnerability/PYSEC-2021-836"}],"summary":"Invenio-Drafts-Resources is a submission/deposit module for Invenio, a software framework for research data management. Invenio-Drafts-Resources prior to versions 0.13.7 and 0.14.6 does not properly c"}