{"action":"Upgrade plone to 2.0.6 or later.","affected":[{"fixed":"2.0.6","introduced":"0"},{"introduced":"2.1.0"}],"component":"plone","cve_ids":["CVE-2006-1711"],"ecosystem":"PyPI","epss":0.04016,"exploited":false,"fixed_versions":["2.0.6"],"ghsa_id":"GHSA-jcwh-rj6j-vm75","id":"tcs_01M5KHD6XYQC472X1EBSNH9YKQ","modified_at":"2026-07-06T08:00:49.070451982Z","published_at":"2026-07-02T14:13:19.823848Z","references":["https://osv.dev/vulnerability/PYSEC-2026-733","https://nvd.nist.gov/vuln/detail/CVE-2006-1711","https://exchange.xforce.ibmcloud.com/vulnerabilities/25781","https://github.com/plone/Plone","https://web.archive.org/web/20060412111111/https://dev.plone.org/plone/ticket/5432","https://web.archive.org/web/20060422195724/http://www.securityfocus.com/bid/17484","http://www.debian.org/security/2006/dsa-1032","https://pypi.org/project/plone","https://github.com/advisories/GHSA-jcwh-rj6j-vm75"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2026-733","url":"https://osv.dev/vulnerability/PYSEC-2026-733"}],"summary":"Plone allows remote users to modify arbitrary portraits"}