{"action":"Upgrade flask-unchained to 0.9.0 or later.","affected":[{"fixed":"0.9.0","introduced":"0"}],"component":"flask-unchained","cve_ids":["CVE-2021-23393"],"ecosystem":"PyPI","epss":0.00716,"exploited":false,"fixed_versions":["0.9.0"],"ghsa_id":"GHSA-pjc4-3w99-j7v4","id":"tcs_01M5KGFW3AAQA1QHBH6XKBNH7W","modified_at":"2023-11-08T04:05:07.026421Z","published_at":"2021-06-11T00:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2021-96","https://snyk.io/vuln/SNYK-PYTHON-FLASKUNCHAINED-1293189","https://github.com/briancappello/flask-unchained/commit/71e36b28166f9ffbe0a991f51127f0984f7e6a40","https://github.com/advisories/GHSA-pjc4-3w99-j7v4"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2021-96","url":"https://osv.dev/vulnerability/PYSEC-2021-96"}],"summary":"This affects the package Flask-Unchained before 0.9.0. When using the the _validate_redirect_url function, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing"}