{"action":"Upgrade zope2 to 2.12.20 or later.","affected":[{"fixed":"2.12.20","introduced":"2.12.0"},{"fixed":"2.13.10","introduced":"2.13.0"}],"component":"zope2","cve_ids":["CVE-2011-3587"],"ecosystem":"PyPI","epss":0.78079,"exploited":false,"fixed_versions":["2.12.20","2.13.10"],"ghsa_id":"GHSA-8w48-m6hx-rjw2","id":"tcs_01M5KGQCVWW4G6ADXYEZCGWQX0","modified_at":"2026-07-07T11:45:36.920153778Z","published_at":"2026-07-06T08:03:27.453449Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1067","https://nvd.nist.gov/vuln/detail/CVE-2011-3587","https://github.com/zopefoundation/Zope/commit/491a583d8c6622b80c75917e5017c4bb4b15e477","https://github.com/zopefoundation/Zope/commit/6bb2fb3c04a76b00bec9bd7c069733e06fa6ebe9","https://bugzilla.redhat.com/show_bug.cgi?id=742297","https://github.com/pypa/advisory-database/tree/main/vulns/products-plonehotfix20110928/PYSEC-2011-26.yaml","https://github.com/zopefoundation/Zope","https://web.archive.org/web/20111013043934/http://zope2.zope.org/news/security-vulnerability-announcement-cve-2011-3587","http://plone.org/products/plone-hotfix/releases/20110928","http://plone.org/products/plone-hotfix/releases/20110928/PloneHotfix20110928-1.0.zip","http://plone.org/products/plone/security/advisories/20110928","http://pypi.python.org/pypi/Products.PloneHotfix20110928/1.0","http://zope2.zope.org/news/security-vulnerability-announcement-cve-2011-3587","https://pypi.org/project/zope2","https://github.com/advisories/GHSA-8w48-m6hx-rjw2"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2026-1067","url":"https://osv.dev/vulnerability/PYSEC-2026-1067"}],"summary":"Zope Command Execution Vulnerability"}