{"action":"Upgrade invenio-rdm-records to 0.32.6 or later.","affected":[{"fixed":"0.32.6","introduced":"0"},{"fixed":"0.33.10","introduced":"0.33.0"}],"component":"invenio-rdm-records","cve_ids":["CVE-2021-43781"],"ecosystem":"PyPI","epss":0.00684,"exploited":false,"fixed_versions":["0.32.6","0.33.10"],"ghsa_id":"GHSA-xr38-w74q-r8jv","id":"tcs_01M5KGFHZBB83YKQNTJ2FFNRWE","modified_at":"2023-11-08T04:07:11.815387Z","published_at":"2021-12-06T18:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2021-838","https://github.com/inveniosoftware/invenio-drafts-resources/commit/039b0cff1ad4b952000f4d8c3a93f347108b6626","https://github.com/inveniosoftware/invenio-drafts-resources/security/advisories/GHSA-xr38-w74q-r8jv"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2021-838","url":"https://osv.dev/vulnerability/PYSEC-2021-838"}],"summary":"Invenio-Drafts-Resources is a submission/deposit module for Invenio, a software framework for research data management. Invenio-Drafts-Resources prior to versions 0.13.7 and 0.14.6 does not properly c"}