{"action":"Upgrade python2.7 to 2.7.15-5 or later.","affected":[{"fixed":"2.7.15-5","introduced":"0"}],"component":"python2.7","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:11","exploited":false,"fixed_versions":["2.7.15-5"],"id":"tcs_01M5NCVBS0E03C5B6J2QXGPP29","modified_at":"2026-08-04T06:04:18.926504975Z","published_at":"2018-09-18T17:29:00.880Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2018-1000802","https://security-tracker.debian.org/tracker/CVE-2018-1000802"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2018-1000802","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2018-1000802"}],"summary":"Python Software Foundation Python (CPython) version 2.7 contains a CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in shutil module (make_arch"}