{"action":"Upgrade b2sdk to 1.14.1 or later.","affected":[{"fixed":"1.14.1","introduced":"0"}],"component":"b2sdk","cve_ids":["CVE-2022-23651"],"ecosystem":"PyPI","epss":0.00217,"exploited":false,"fixed_versions":["1.14.1"],"ghsa_id":"GHSA-p867-fxfr-ph2w","id":"tcs_01M5KGH49KA1NSH6MD5TVESQQ0","modified_at":"2023-11-08T04:08:26.607921Z","published_at":"2022-02-23T23:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2022-33","https://github.com/Backblaze/b2-sdk-python/commit/62476638986e5b6d7459aca5ef8ce220760226e0","https://pypi.org/project/b2sdk/","https://github.com/Backblaze/b2-sdk-python/security/advisories/GHSA-p867-fxfr-ph2w"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2022-33","url":"https://osv.dev/vulnerability/PYSEC-2022-33"}],"summary":"b2-sdk-python is a python library to access cloud storage provided by backblaze. Linux and Mac releases of the SDK version 1.14.0 and below contain a key disclosure vulnerability that, in certain cond"}