{"action":"Upgrade bugsink to 1.4.3 or later.","affected":[{"fixed":"1.4.3","introduced":"0"},{"fixed":"1.5.5","introduced":"1.5.0"},{"fixed":"1.6.4","introduced":"1.6.0"},{"fixed":"1.7.4","introduced":"1.7.0"}],"component":"bugsink","cve_ids":["CVE-2025-54433"],"ecosystem":"PyPI","epss":0.00613,"exploited":false,"fixed_versions":["1.4.3","1.5.5","1.6.4","1.7.4"],"ghsa_id":"GHSA-q78p-g86f-jg6q","id":"tcs_01M5KGRAFX24GKYSAFEJ2M1AY8","modified_at":"2026-07-07T17:47:33.598285954Z","published_at":"2026-07-07T16:02:59.100727Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1226","https://github.com/bugsink/bugsink/security/advisories/GHSA-q78p-g86f-jg6q","https://nvd.nist.gov/vuln/detail/CVE-2025-54433","https://github.com/bugsink/bugsink/commit/1001726f4389e982c486cdd5fa81941cb46cfc33","https://github.com/bugsink/bugsink/commit/211ddf76758c808c095b5f836c363f148d934d21","https://github.com/bugsink/bugsink/commit/2c41fbe3881bdea83399a7f9fdc8cff198ae089f","https://github.com/bugsink/bugsink/commit/53cf1a17a3e96f7c83c7451fd56f980a09d0c9b0","https://github.com/bugsink/bugsink/commit/55a155003d0b416ea008c5e7dcde85130ad21d9b","https://github.com/bugsink/bugsink/commit/b94aa8a5c96ce8cdd9711b6beb4e518264993ac2","https://github.com/bugsink/bugsink/commit/c341687bd655543730c812db35c29199f788be6b","https://github.com/bugsink/bugsink/commit/c87217bd565122ba70af90436e3ab2cd9bee658f","https://github.com/bugsink/bugsink","https://pypi.org/project/bugsink","https://github.com/advisories/GHSA-q78p-g86f-jg6q"],"severity":{"label":"high","score":7.2},"sources":[{"source":"osv","source_id":"PYSEC-2026-1226","url":"https://osv.dev/vulnerability/PYSEC-2026-1226"},{"source":"nvd","source_id":"CVE-2025-54433","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-54433"}],"summary":"Bugsink path traversal via event_id in ingestion"}