{"action":"Upgrade sosreport to 4.4 or later.","affected":[{"fixed":"4.4","introduced":"0"}],"component":"sosreport","cve_ids":["CVE-2022-2806"],"ecosystem":"PyPI","epss":0.00249,"exploited":false,"fixed_versions":["4.4"],"ghsa_id":"GHSA-7pf9-7cff-f854","id":"tcs_01M5KHEDS8G44R4BK844JK1HTH","modified_at":"2026-07-07T11:45:51.077674573Z","published_at":"2026-07-06T08:03:32.275629Z","references":["https://osv.dev/vulnerability/PYSEC-2026-925","https://nvd.nist.gov/vuln/detail/CVE-2022-2806","https://github.com/sosreport/sos/pull/2947","https://github.com/sosreport/sos/commit/5fd872c64c53af37015f366295e0c2418c969757","https://github.com/sosreport/sos","https://pypi.org/project/sosreport","https://github.com/advisories/GHSA-7pf9-7cff-f854"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"PYSEC-2026-925","url":"https://osv.dev/vulnerability/PYSEC-2026-925"}],"summary":"sosreport Exposure of Sensitive Information vulnerability"}