{"action":"Upgrade planet to 2.0.1 or later.","affected":[{"fixed":"2.0.1","introduced":"0"}],"component":"planet","cve_ids":["CVE-2023-32303"],"ecosystem":"PyPI","epss":0.00252,"exploited":false,"fixed_versions":["2.0.1"],"ghsa_id":"GHSA-j5fj-rfh6-qj85","id":"tcs_01M5KGKQ1DQ1EAJTPHTRDF2G8S","modified_at":"2023-11-08T04:12:34.413335Z","published_at":"2023-05-12T21:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2023-71","https://github.com/planetlabs/planet-client-python/commit/d71415a83119c5e89d7b80d5f940d162376ee3b7","https://github.com/planetlabs/planet-client-python/security/advisories/GHSA-j5fj-rfh6-qj85","https://github.com/planetlabs/planet-client-python/releases/tag/2.0.1"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2023-71","url":"https://osv.dev/vulnerability/PYSEC-2023-71"}],"summary":"Planet is software that provides satellite data. The secret file stores the user's Planet API authentication information. It should only be accessible by the user, but before version 2.0.1, its permis"}