{"action":"Upgrade python-uvicorn to 0.13.3-1 or later.","affected":[{"fixed":"0.13.3-1","introduced":"0"}],"component":"python-uvicorn","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["0.13.3-1"],"id":"tcs_01M5NF83RG2EG6XHSPJHPS1VD0","modified_at":"2026-09-11T11:02:40.390765433Z","published_at":"2020-07-27T12:15:11.870Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2020-7694","https://security-tracker.debian.org/tracker/CVE-2020-7694"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2020-7694#Debian:13/python-uvicorn","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2020-7694"}],"summary":"This affects all versions of package uvicorn. The request logger provided by the package is vulnerable to ASNI escape sequence injection. Whenever any HTTP request is received, the default behaviour o"}