{"action":"Upgrade ethyca-fides to 2.15.1 or later.","affected":[{"fixed":"2.15.1","introduced":"0"}],"component":"ethyca-fides","cve_ids":["CVE-2023-36827"],"ecosystem":"PyPI","epss":0.01491,"exploited":false,"fixed_versions":["2.15.1"],"ghsa_id":"GHSA-r25m-cr6v-p9hq","id":"tcs_01M5KGJ9YC4ZZZ012TVV4MBFA2","modified_at":"2023-11-08T04:12:59.492694Z","published_at":"2023-07-05T22:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2023-107","https://github.com/ethyca/fides/security/advisories/GHSA-r25m-cr6v-p9hq","https://github.com/ethyca/fides/commit/f526d9ffb176006d701493c9d0eff6b4884e811f","https://github.com/ethyca/fides/releases/tag/2.15.1"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2023-107","url":"https://osv.dev/vulnerability/PYSEC-2023-107"}],"summary":"Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in a runtime environment, and the enforcement of privacy regulations in code. A path traversa"}