{"action":"Upgrade puncia to 0.21 or later.","affected":[{"fixed":"0.21","introduced":"0"}],"component":"puncia","cve_ids":["CVE-2024-41124"],"ecosystem":"PyPI","epss":0.00272,"exploited":false,"fixed_versions":["0.21"],"ghsa_id":"GHSA-rwcj-7jjp-4w38","id":"tcs_01M5KGVTB2GDM7K5SA63XQ7DPE","modified_at":"2026-07-07T17:48:03.485397229Z","published_at":"2026-07-07T14:34:37.090719Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1809","https://github.com/ARPSyndicate/puncia/security/advisories/GHSA-rwcj-7jjp-4w38","https://nvd.nist.gov/vuln/detail/CVE-2024-41124","https://github.com/ARPSyndicate/puncia/issues/8","https://github.com/ARPSyndicate/puncia/commit/033f3b68126eabbb2040ce16e2c3a2ce17437fbd","https://github.com/ARPSyndicate/puncia/commit/033f3b68126eabbb2040ce16e2c3a2ce17437fbd#diff-3ec6c2de51e702726b23c452e3f4a899f6f4253af9fbf5be7254a5c1407ab526","https://github.com/ARPSyndicate/puncia","https://pypi.org/project/puncia","https://github.com/advisories/GHSA-rwcj-7jjp-4w38"],"severity":{"label":"low","score":3.8},"sources":[{"source":"osv","source_id":"PYSEC-2026-1809","url":"https://osv.dev/vulnerability/PYSEC-2026-1809"}],"summary":"[PUNCIA] [CWE-319] Cleartext Transmission of Sensitive Information via HTTP urls in `API_URLS`"}