{"action":"Upgrade irrd to 4.2.3 or later.","affected":[{"fixed":"4.2.3","introduced":"4.2.0"}],"component":"irrd","cve_ids":["CVE-2022-24798"],"ecosystem":"PyPI","epss":0.01422,"exploited":false,"fixed_versions":["4.2.3"],"ghsa_id":"GHSA-cqxx-66wh-8pjw","id":"tcs_01M5KGGBKK6PTKE279BNWPSQS4","modified_at":"2023-11-08T04:08:36.898430Z","published_at":"2022-03-31T23:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2022-178","https://github.com/irrdnet/irrd/commit/fdffaf8dd71713f06e99dff417e6aa1e6fa84b70","https://github.com/irrdnet/irrd/security/advisories/GHSA-cqxx-66wh-8pjw","https://github.com/irrdnet/irrd/commit/0e41bae8d3d27316381a2fc7b466597230e35ec6"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2022-178","url":"https://osv.dev/vulnerability/PYSEC-2022-178"}],"summary":"Internet Routing Registry daemon version 4 is an IRR database server, processing IRR objects in the RPSL format. IRRd did not always filter password hashes in query responses relating to `mntner` obje"}