{"action":"Upgrade roundup to 0.7.3 or later.","affected":[{"fixed":"0.7.3","introduced":"0"}],"component":"roundup","cve_ids":["CVE-2004-1444"],"ecosystem":"PyPI","epss":0.08865,"exploited":false,"fixed_versions":["0.7.3"],"ghsa_id":"GHSA-q7mf-hp9m-cx6f","id":"tcs_01M5KHD9K13241XCDM324RSFE6","modified_at":"2026-07-06T08:00:51.696578875Z","published_at":"2026-07-02T14:13:18.630695Z","references":["https://osv.dev/vulnerability/PYSEC-2026-745","https://nvd.nist.gov/vuln/detail/CVE-2004-1444","https://exchange.xforce.ibmcloud.com/vulnerabilities/16350","https://github.com/roundup-tracker/roundup","http://packetstormsecurity.nl/0406-exploits/roundUP.txt","http://secunia.com/advisories/11801","http://securitytracker.com/id?1010415","http://sourceforge.net/tracker/index.php?func=detail&aid=961511&group_id=31577&atid=402788","http://www.gentoo.org/security/en/glsa/glsa-200408-09.xml","http://www.securityfocus.com/bid/10495","https://pypi.org/project/roundup","https://github.com/advisories/GHSA-q7mf-hp9m-cx6f"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2026-745","url":"https://osv.dev/vulnerability/PYSEC-2026-745"}],"summary":"Roundup Directory traversal vulnerability"}