{"action":"Upgrade django-termsandconditions to 2.0.11 or later.","affected":[{"fixed":"2.0.11","introduced":"0"}],"component":"django-termsandconditions","cve_ids":["CVE-2022-4589"],"ecosystem":"PyPI","epss":0.00495,"exploited":false,"fixed_versions":["2.0.11"],"ghsa_id":"GHSA-6rmf-cv6p-4h27","id":"tcs_01M5KHDNP8PBXJCR16GFDQYJ4J","modified_at":"2026-07-07T11:45:45.028739568Z","published_at":"2026-07-07T10:17:25.695096Z","references":["https://osv.dev/vulnerability/PYSEC-2026-805","https://nvd.nist.gov/vuln/detail/CVE-2022-4589","https://github.com/cyface/django-termsandconditions/pull/239","https://github.com/cyface/django-termsandconditions/commit/03396a1c2e0af95e12a45c5faef7e47a4b513e1a","https://github.com/cyface/django-termsandconditions","https://github.com/cyface/django-termsandconditions/releases/tag/v2.0.10","https://github.com/cyface/django-termsandconditions/releases/tag/v2.0.11","https://vuldb.com/?id.216175","https://pypi.org/project/django-termsandconditions","https://github.com/advisories/GHSA-6rmf-cv6p-4h27"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"PYSEC-2026-805","url":"https://osv.dev/vulnerability/PYSEC-2026-805"}],"summary":"Terms and Conditions Module vulnerable to Open Redirect"}