{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.42.1"}],"component":"motioneye","cve_ids":["CVE-2021-44255"],"ecosystem":"PyPI","epss":0.03138,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-m2c7-42rf-c62f","id":"tcs_01M5KHCW5R7PR7XMNNDA0YVBZY","modified_at":"2026-07-06T08:00:39.999549385Z","published_at":"2026-07-02T14:13:15.109139Z","references":["https://osv.dev/vulnerability/PYSEC-2026-681","https://nvd.nist.gov/vuln/detail/CVE-2021-44255","https://github.com/ccrisan/motioneyeos/issues/2843","https://github.com/ccrisan/motioneye","https://www.pizzapower.me/2021/10/09/self-hosted-security-part-1-motioneye","https://pypi.org/project/motioneye","https://github.com/advisories/GHSA-m2c7-42rf-c62f"],"severity":{"label":"high","score":7.2},"sources":[{"source":"osv","source_id":"PYSEC-2026-681","url":"https://osv.dev/vulnerability/PYSEC-2026-681"}],"summary":"Unrestricted Upload of File with Dangerous Type in motionEye"}