{"action":"Upgrade flask-session-captcha to 1.2.1 or later.","affected":[{"fixed":"1.2.1","introduced":"0"}],"component":"flask-session-captcha","cve_ids":["CVE-2022-24880"],"ecosystem":"PyPI","epss":0.01206,"exploited":false,"fixed_versions":["1.2.1"],"ghsa_id":"GHSA-7r87-cj48-wj45","id":"tcs_01M5KGGEH55H5R6K9XSR26NXPW","modified_at":"2023-11-08T04:08:39.356991Z","published_at":"2022-04-25T22:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2022-193","https://github.com/Tethik/flask-session-captcha/releases/tag/v1.2.1","https://github.com/Tethik/flask-session-captcha/pull/27","https://github.com/Tethik/flask-session-captcha/commit/2811ae23a38d33b620fb7a07de8837c6d65c13e4","https://github.com/Tethik/flask-session-captcha/security/advisories/GHSA-7r87-cj48-wj45"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2022-193","url":"https://osv.dev/vulnerability/PYSEC-2022-193"}],"summary":"flask-session-captcha is a package which allows users to extend Flask by adding an image based captcha stored in a server side session. In versions prior to 1.2.1, he `captcha.validate()` function wou"}