{"action":"Upgrade twisted to 24.7.0rc1 or later.","affected":[{"fixed":"24.7.0rc1","introduced":"0"}],"component":"twisted","cve_ids":["CVE-2024-41810"],"ecosystem":"PyPI","epss":0.01201,"exploited":false,"fixed_versions":["24.7.0rc1"],"ghsa_id":"GHSA-cf56-g6w6-pqq2","id":"tcs_01M5KGNE21R1GKZHKBCAPNNWPZ","modified_at":"2024-09-11T19:42:11.394508Z","published_at":"2024-07-29T16:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2024-75","https://github.com/twisted/twisted/security/advisories/GHSA-cf56-g6w6-pqq2","https://github.com/twisted/twisted/commit/046a164f89a0f08d3239ecebd750360f8914df33"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"PYSEC-2024-75","url":"https://osv.dev/vulnerability/PYSEC-2024-75"}],"summary":"Twisted is an event-based framework for internet applications, supporting Python 3.6+. The `twisted.web.util.redirectTo` function contains an HTML injection vulnerability. If application code allows a"}