{"action":"Upgrade accesscontrol to 4.4 or later.","affected":[{"fixed":"4.4","introduced":"0"},{"fixed":"5.8","introduced":"5.0"},{"fixed":"6.2","introduced":"6.0"}],"component":"accesscontrol","cve_ids":["CVE-2023-41050"],"ecosystem":"PyPI","epss":0.00641,"exploited":false,"fixed_versions":["4.4","5.8","6.2"],"ghsa_id":"GHSA-8xv7-89vj-q48c","id":"tcs_01M5KGYSQD6GHP1FNDG1G5F94B","modified_at":"2026-07-13T16:43:49.162960743Z","published_at":"2026-07-13T14:20:02.135840Z","references":["https://osv.dev/vulnerability/PYSEC-2026-2325","https://github.com/zopefoundation/AccessControl/security/advisories/GHSA-8xv7-89vj-q48c","https://nvd.nist.gov/vuln/detail/CVE-2023-41050","https://github.com/zopefoundation/AccessControl/commit/6bc32692e0d4b8d5cf64eae3d19de987c7375bc9","https://github.com/zopefoundation/AccessControl","https://pypi.org/project/accesscontrol","https://github.com/advisories/GHSA-8xv7-89vj-q48c"],"severity":{"label":"medium","score":6.8},"sources":[{"source":"osv","source_id":"PYSEC-2026-2325","url":"https://osv.dev/vulnerability/PYSEC-2026-2325"}],"summary":"Information disclosure in AccessControl"}