{"action":"Upgrade invenio-app-rdm to 6.0.5 or later.","affected":[{"fixed":"6.0.5","introduced":"0"},{"fixed":"7.0.0.dev5","introduced":"7.0.0.dev0"}],"component":"invenio-app-rdm","cve_ids":["CVE-2021-43781"],"ecosystem":"PyPI","epss":0.00684,"exploited":false,"fixed_versions":["6.0.5","7.0.0.dev5"],"ghsa_id":"GHSA-xr38-w74q-r8jv","id":"tcs_01M5KGFHSWME9YTREP3RY5YFFY","modified_at":"2023-11-08T04:07:11.815387Z","published_at":"2021-12-06T18:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2021-837","https://github.com/inveniosoftware/invenio-drafts-resources/commit/039b0cff1ad4b952000f4d8c3a93f347108b6626","https://github.com/inveniosoftware/invenio-drafts-resources/security/advisories/GHSA-xr38-w74q-r8jv"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2021-837","url":"https://osv.dev/vulnerability/PYSEC-2021-837"}],"summary":"Invenio-Drafts-Resources is a submission/deposit module for Invenio, a software framework for research data management. Invenio-Drafts-Resources prior to versions 0.13.7 and 0.14.6 does not properly c"}