{"action":"Upgrade nicotine-plus to 3.2.1 or later.","affected":[{"fixed":"3.2.1","introduced":"3.0.3"}],"component":"nicotine-plus","cve_ids":["CVE-2021-45848"],"ecosystem":"PyPI","epss":0.01624,"exploited":false,"fixed_versions":["3.2.1"],"ghsa_id":"GHSA-p4v2-r99v-wjc2","id":"tcs_01M5KHCX4WZ6VSBJME8S7A4WWW","modified_at":"2026-07-06T08:00:47.602203985Z","published_at":"2026-07-02T14:13:16.407927Z","references":["https://osv.dev/vulnerability/PYSEC-2026-687","https://nvd.nist.gov/vuln/detail/CVE-2021-45848","https://github.com/nicotine-plus/nicotine-plus/issues/1777","https://github.com/nicotine-plus/nicotine-plus/commit/0e3e2fac27a518f0a84330f1ddf1193424522045","https://github.com/nicotine-plus/nicotine-plus","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HWYV53KERFH2EC4XI2IVVQFTV75E5XM6","https://security.gentoo.org/glsa/202210-20","https://pypi.org/project/nicotine-plus","https://github.com/advisories/GHSA-p4v2-r99v-wjc2"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"PYSEC-2026-687","url":"https://osv.dev/vulnerability/PYSEC-2026-687"}],"summary":"Nicotine+ DoS on Null Character in Download Request"}