{"action":"Upgrade gerapy to 0.9.8 or later.","affected":[{"fixed":"0.9.8","introduced":"0"}],"component":"gerapy","cve_ids":["CVE-2021-43857"],"ecosystem":"PyPI","epss":0.55608,"exploited":false,"fixed_versions":["0.9.8"],"ghsa_id":"GHSA-9w7f-m4j4-j3xw","id":"tcs_01M5KGFQ5KH1J1SKRTVME5VWK3","modified_at":"2023-11-08T04:07:14.715843Z","published_at":"2021-12-27T19:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2021-867","https://github.com/Gerapy/Gerapy/security/advisories/GHSA-9w7f-m4j4-j3xw","https://github.com/Gerapy/Gerapy/issues/219","https://github.com/Gerapy/Gerapy/commit/49bcb19be5e0320e7e1535f34fe00f16a3cf3b28","http://packetstormsecurity.com/files/165459/Gerapy-0.9.7-Remote-Code-Execution.html"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2021-867","url":"https://osv.dev/vulnerability/PYSEC-2021-867"}],"summary":"Gerapy is a distributed crawler management framework. Gerapy prior to version 0.9.8 is vulnerable to remote code execution, and this issue is patched in version 0.9.8."}