{"action":"Upgrade ckan to 2.10.5 or later.","affected":[{"fixed":"2.10.5","introduced":"0"}],"component":"ckan","cve_ids":["CVE-2024-43371"],"ecosystem":"PyPI","epss":0.00369,"exploited":false,"fixed_versions":["2.10.5"],"ghsa_id":"GHSA-g9ph-j5vj-f8wm","id":"tcs_01M5KGRFGS9TCSDG1WW6AJ5PDD","modified_at":"2026-07-07T17:47:25.977647652Z","published_at":"2026-07-07T14:34:39.245046Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1252","https://github.com/ckan/ckan/security/advisories/GHSA-g9ph-j5vj-f8wm","https://nvd.nist.gov/vuln/detail/CVE-2024-43371","https://github.com/ckan/ckan/commit/382beaec98cb331f2a030459ef043c50eaf5ad53","https://github.com/ckan/ckan/commit/8601183cc2fc87277ea5b33ff75c3a5610812ab5","https://github.com/ckan/ckan","https://pypi.org/project/ckan","https://github.com/advisories/GHSA-g9ph-j5vj-f8wm"],"severity":{"label":"medium","score":4.5},"sources":[{"source":"osv","source_id":"PYSEC-2026-1252","url":"https://osv.dev/vulnerability/PYSEC-2026-1252"}],"summary":"Potential access to sensitive URLs via CKAN extensions (SSRF)"}