{"action":"Upgrade roundup to 1.2.1 or later.","affected":[{"fixed":"1.2.1","introduced":"1.2"},{"fixed":"1.4.7","introduced":"1.4"}],"component":"roundup","cve_ids":["CVE-2009-2737"],"ecosystem":"PyPI","epss":0.02341,"exploited":false,"fixed_versions":["1.2.1","1.4.7"],"ghsa_id":"GHSA-9rj9-5wcv-xgf2","id":"tcs_01M5KHD9DA8Y1WTAHFF8PZBBM5","modified_at":"2026-07-06T08:00:50.582207132Z","published_at":"2026-07-02T14:13:21.376368Z","references":["https://osv.dev/vulnerability/PYSEC-2026-744","https://nvd.nist.gov/vuln/detail/CVE-2009-2737","https://bugzilla.redhat.com/show_bug.cgi?id=489355","https://github.com/roundup-tracker/roundup/blob/d24abceaa19072b28e5c8ae0db4dd341597d14fc/CHANGES.txt#L2356","https://sourceforge.net/p/roundup/code/ci/4081","https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00429.html","https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00439.html","http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=518768","http://issues.roundup-tracker.org/issue2550521","http://secunia.com/advisories/34192","http://www.debian.org/security/2009/dsa-1754","http://www.osvdb.org/56368","http://www.securityfocus.com/bid/34059","https://pypi.org/project/roundup","https://github.com/advisories/GHSA-9rj9-5wcv-xgf2"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2026-744","url":"https://osv.dev/vulnerability/PYSEC-2026-744"}],"summary":"Roundup Improper Access Control"}