{"action":"Upgrade octoprint to 1.9.3 or later.","affected":[{"fixed":"1.9.3","introduced":"0"}],"component":"octoprint","cve_ids":["CVE-2023-41047"],"ecosystem":"PyPI","epss":0.00587,"exploited":false,"fixed_versions":["1.9.3"],"ghsa_id":"GHSA-fwfg-vprh-97ph","id":"tcs_01M5KGJT6EN2V50ZJG1KYR1T4S","modified_at":"2023-11-08T04:13:23.882327Z","published_at":"2023-10-09T16:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2023-195","https://github.com/OctoPrint/OctoPrint/commit/d0072cff894509c77e243d6562245ad3079e17db","https://github.com/OctoPrint/OctoPrint/releases/tag/1.9.3","https://github.com/OctoPrint/OctoPrint/security/advisories/GHSA-fwfg-vprh-97ph"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"PYSEC-2023-195","url":"https://osv.dev/vulnerability/PYSEC-2023-195"}],"summary":"OctoPrint is a web interface for 3D printers. OctoPrint versions up until and including 1.9.2 contain a vulnerability that allows malicious admins to configure a specially crafted GCODE script that wi"}