{"action":"Upgrade products-cmfcore to 3.2 or later.","affected":[{"fixed":"3.2","introduced":"0"}],"component":"products-cmfcore","cve_ids":["CVE-2023-36814"],"ecosystem":"PyPI","epss":0.00723,"exploited":false,"fixed_versions":["3.2"],"ghsa_id":"GHSA-4hpj-8rhv-9x87","id":"tcs_01M5KGJBBNZS6M21KG71NNKAQW","modified_at":"2025-10-09T08:26:16.655481Z","published_at":"2023-07-03T17:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2023-113","https://github.com/zopefoundation/Products.CMFCore/security/advisories/GHSA-4hpj-8rhv-9x87","https://github.com/zopefoundation/Products.CMFCore/commit/40f03f43a60f28ca9485c8ef429efef729be54e5"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2023-113","url":"https://osv.dev/vulnerability/PYSEC-2023-113"}],"summary":"Products.CMFCore are the key framework services for the Zope Content Management Framework (CMF). The use of Python's marshal module to handle unchecked input in a public method on `PortalFolder` objec"}