{"action":"Upgrade thefuck to 3.31 or later.","affected":[{"fixed":"3.31","introduced":"0"}],"component":"thefuck","cve_ids":["CVE-2021-34363"],"ecosystem":"PyPI","epss":0.01847,"exploited":false,"fixed_versions":["3.31"],"ghsa_id":"GHSA-8wwf-2644-f8x4","id":"tcs_01M5KGFW8KN1QRSV5S140BQSKG","modified_at":"2023-11-08T04:06:07.691196Z","published_at":"2021-06-10T11:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2021-97","https://vuln.ryotak.me/advisories/48","https://github.com/nvbn/thefuck/commit/e343c577cd7da4d304b837d4a07ab4df1e023092","https://github.com/nvbn/thefuck/releases/tag/3.31","https://github.com/advisories/GHSA-8wwf-2644-f8x4"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2021-97","url":"https://osv.dev/vulnerability/PYSEC-2021-97"}],"summary":"The thefuck (aka The Fuck) package before 3.31 for Python allows Path Traversal that leads to arbitrary file deletion via the \"undo archive operation\" feature."}