{"action":"Upgrade rdiffweb to 2.8.1 or later.","affected":[{"fixed":"2.8.1","introduced":"0"}],"component":"rdiffweb","cve_ids":["CVE-2023-4138"],"ecosystem":"PyPI","epss":0.00448,"exploited":false,"fixed_versions":["2.8.1"],"ghsa_id":"GHSA-wwrg-2w5j-grvx","id":"tcs_01M5KGW4MFDVE34QAPVDWMD9B3","modified_at":"2026-07-07T17:47:00.404114890Z","published_at":"2026-07-07T11:45:21.664521Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1863","https://nvd.nist.gov/vuln/detail/CVE-2023-4138","https://github.com/ikus060/rdiffweb/commit/feef0d7b11d86aed29bf98c21526088117964d85","https://github.com/ikus060/rdiffweb","https://huntr.dev/bounties/1b1fa915-d588-4bb1-9e82-6a6be79befed","https://pypi.org/project/rdiffweb","https://github.com/advisories/GHSA-wwrg-2w5j-grvx"],"severity":{"label":"medium","score":4.2},"sources":[{"source":"osv","source_id":"PYSEC-2026-1863","url":"https://osv.dev/vulnerability/PYSEC-2026-1863"}],"summary":"RDiffWeb vulnerable to Allocation of Resources Without Limits or Throttling"}