{"action":"Upgrade ipsilon to 1.0.3 or later.","affected":[{"fixed":"1.0.3","introduced":"1.0.0"},{"fixed":"1.1.2","introduced":"1.1.0"},{"fixed":"1.2.1","introduced":"1.2.0"},{"fixed":"2.0.2","introduced":"2.0.0"}],"component":"ipsilon","cve_ids":["CVE-2016-8638"],"ecosystem":"PyPI","epss":0.02136,"exploited":false,"fixed_versions":["1.0.3","1.1.2","2.0.2","1.2.1"],"ghsa_id":"GHSA-376m-3rm2-9jm6","id":"tcs_01M5KH691FNF6ADCSQAA4JKKP4","modified_at":"2026-07-02T13:00:07.935493576Z","published_at":"2026-06-29T11:50:32.271750Z","references":["https://osv.dev/vulnerability/PYSEC-2026-360","https://nvd.nist.gov/vuln/detail/CVE-2016-8638","https://github.com/ipsilon-project/ipsilon/commit/1c48414877fc110652b6078a29529972c7ec9122","https://github.com/ipsilon-project/ipsilon/commit/64fc366c054fc6af1d9d2692902db169884b5f78","https://github.com/ipsilon-project/ipsilon/commit/a33303b6beb5c316d7c18b23566b7666a4e307a4","https://github.com/ipsilon-project/ipsilon/commit/b4744a92d4fa7f6d7ade0ae2d99a2dc0ea94734d","https://access.redhat.com/errata/RHSA-2016:2809","https://access.redhat.com/security/cve/CVE-2016-8638","https://bugzilla.redhat.com/show_bug.cgi?id=1392829","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8638","https://github.com/ipsilon-project/ipsilon","https://ipsilon-project.org/advisory/CVE-2016-8638.txt","https://ipsilon-project.org/release/2.1.0.html","https://pagure.io/ipsilon/c/511fa8b7001c2f9a42301aa1d4b85aaf170a461c","http://rhn.redhat.com/errata/RHSA-2016-2809.html","http://www.securityfocus.com/bid/94439","https://pypi.org/project/ipsilon","https://github.com/advisories/GHSA-376m-3rm2-9jm6"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"PYSEC-2026-360","url":"https://osv.dev/vulnerability/PYSEC-2026-360"}],"summary":"Session Fixation in ipsilon"}