{"action":"Upgrade dpaste to 3.8 or later.","affected":[{"fixed":"3.8","introduced":"0"}],"component":"dpaste","cve_ids":["CVE-2023-49277"],"ecosystem":"PyPI","epss":0.00517,"exploited":false,"fixed_versions":["3.8"],"ghsa_id":"GHSA-r8j9-5cj7-cv39","id":"tcs_01M5KGRW3BEWB95YBCRJ93T9EZ","modified_at":"2026-07-07T17:46:39.459439874Z","published_at":"2026-07-07T11:45:28.036200Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1317","https://github.com/DarrenOfficial/dpaste/security/advisories/GHSA-r8j9-5cj7-cv39","https://nvd.nist.gov/vuln/detail/CVE-2023-49277","https://github.com/DarrenOfficial/dpaste/commit/44a666a79b3b29ed4f340600bfcf55113bfb7086","https://github.com/DarrenOfficial/dpaste","https://pypi.org/project/dpaste","https://github.com/advisories/GHSA-r8j9-5cj7-cv39"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"PYSEC-2026-1317","url":"https://osv.dev/vulnerability/PYSEC-2026-1317"}],"summary":"Reflected XSS Vulnerability in dpaste"}