{"action":"Upgrade octoprint to 1.8.3 or later.","affected":[{"fixed":"1.8.3","introduced":"0"}],"component":"octoprint","cve_ids":["CVE-2022-2872"],"ecosystem":"PyPI","epss":0.00691,"exploited":false,"fixed_versions":["1.8.3"],"ghsa_id":"GHSA-49wm-4fp6-h59c","id":"tcs_01M5KGGZZ9K6VJARNEFV8GMH2V","modified_at":"2026-06-10T17:02:26.068119147Z","published_at":"2022-09-21T10:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2022-286","https://github.com/octoprint/octoprint/commit/3e3c11811e216fb371a33e28412df83f9701e5b0","https://huntr.dev/bounties/b966c74d-6f3f-49fe-b40a-eaf25e362c56","https://github.com/advisories/GHSA-49wm-4fp6-h59c"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2022-286","url":"https://osv.dev/vulnerability/PYSEC-2022-286"}],"summary":"Unrestricted Upload of File with Dangerous Type in GitHub repository octoprint/octoprint prior to 1.8.3."}