PyPI/phantom-audio: high 7.7
Phantom: Arbitrary file write and decode-bomb DoS via unconfined MCP tool paths
Action: Upgrade phantom-audio to 1.3.1 or later.
pip install phantom-audio==1.3.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.3.1 | - |
Fixed versions
| 1.3.1 |
Sources
- osv: GHSA-52vm-mxx8-f227
- https://github.com/fadelabs/phantom/security/advisories/GHSA-52vm-mxx8-f227
- https://github.com/fadelabs/phantom
published · modified · JSON