{"action":"Upgrade cobbler to 3.3.1 or later.","affected":[{"fixed":"3.3.1","introduced":"0"}],"component":"cobbler","cve_ids":["CVE-2021-45082"],"ecosystem":"PyPI","epss":0.00495,"exploited":false,"fixed_versions":["3.3.1"],"ghsa_id":"GHSA-6cm4-gm85-972c","id":"tcs_01M5KGH56JFG4R6W6B54AKD8BW","modified_at":"2025-10-09T08:23:54.151503Z","published_at":"2022-02-19T00:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2022-37","https://github.com/cobbler/cobbler/releases","https://bugzilla.suse.com/show_bug.cgi?id=1193678","https://github.com/advisories/GHSA-6cm4-gm85-972c"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2022-37","url":"https://osv.dev/vulnerability/PYSEC-2022-37"}],"summary":"An issue was discovered in Cobbler before 3.3.1. In the templar.py file, the function check_for_invalid_imports can allow Cheetah code to import Python modules via the \"#from MODULE import\" substring."}