{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.8.2"}],"component":"boxlite","cve_ids":["CVE-2026-47213"],"ecosystem":"PyPI","epss":0.00268,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-xjhv-pp2r-6f82","id":"tcs_01M5KGZ8CW0QRSCA99FWTR9ZSK","modified_at":"2026-07-13T16:31:39.072050420Z","published_at":"2026-07-13T15:35:21.279142Z","references":["https://osv.dev/vulnerability/PYSEC-2026-2400","https://github.com/boxlite-ai/boxlite/security/advisories/GHSA-xjhv-pp2r-6f82","https://nvd.nist.gov/vuln/detail/CVE-2026-47213","https://github.com/boxlite-ai/boxlite/commit/28159fc5b6b6fd5037e18a58fc4644c882e3c581","https://github.com/boxlite-ai/boxlite","https://pypi.org/project/boxlite","https://github.com/advisories/GHSA-xjhv-pp2r-6f82"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"PYSEC-2026-2400","url":"https://osv.dev/vulnerability/PYSEC-2026-2400"}],"summary":"BoxLite has a Timeout Bypass Vulnerability"}