{"action":"Upgrade reviewboard to 1.7.15 or later.","affected":[{"fixed":"1.7.15","introduced":"0"}],"component":"reviewboard","cve_ids":["CVE-2013-4409"],"ecosystem":"PyPI","epss":0.03649,"exploited":false,"fixed_versions":["1.7.15"],"ghsa_id":"GHSA-58h8-44mg-r43x","id":"tcs_01M5KHBXB4CSHE864DRVCFXQJZ","modified_at":"2026-07-01T20:23:04.091952Z","published_at":"2026-06-29T11:50:32.931283Z","references":["https://osv.dev/vulnerability/PYSEC-2026-524","https://nvd.nist.gov/vuln/detail/CVE-2013-4409","https://access.redhat.com/security/cve/cve-2013-4409","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4409","https://exchange.xforce.ibmcloud.com/vulnerabilities/88059","https://github.com/djblets/djblets","https://github.com/djblets/djblets/blob/release-0.7.19/NEWS","https://github.com/pypa/advisory-database/tree/main/vulns/djblets/PYSEC-2019-175.yaml","https://security-tracker.debian.org/tracker/CVE-2013-4409","https://web.archive.org/web/20200228151135/https://www.securityfocus.com/bid/63029","https://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.15","http://lists.fedoraproject.org/pipermail/package-announce/2013-November/120619.html","http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119819.html","http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119820.html","http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119830.html","http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119831.html","https://pypi.org/project/reviewboard","https://github.com/advisories/GHSA-58h8-44mg-r43x"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"PYSEC-2026-524","url":"https://osv.dev/vulnerability/PYSEC-2026-524"}],"summary":"ReviewBoard and Djblets library are vulnerable to code execution"}