{"action":"Upgrade graphifyy to 0.9.70 or later.","affected":[{"fixed":"0.9.70","introduced":"0.7.2"}],"component":"graphifyy","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["0.9.70"],"ghsa_id":"GHSA-pcc4-rvhr-2pr8","id":"tcs_01M5JHJPK53N86Y10WCZ6TMCZS","modified_at":"2026-10-19T17:00:04.142006586Z","published_at":"2026-10-19T16:51:36Z","references":["https://osv.dev/vulnerability/GHSA-pcc4-rvhr-2pr8","https://github.com/Graphify-Labs/graphify/security/advisories/GHSA-pcc4-rvhr-2pr8","https://github.com/Graphify-Labs/graphify/commit/e1d9deed6a437f2c85458ef3c42519159f322b7b","https://github.com/Graphify-Labs/graphify","https://github.com/Graphify-Labs/graphify/releases/tag/v0.9.70"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-pcc4-rvhr-2pr8","url":"https://osv.dev/vulnerability/GHSA-pcc4-rvhr-2pr8"}],"summary":"Graphify Fortran extractor: incomplete cpp #include hardening allows arbitrary host-file read/exfiltration when indexing an untrusted repo"}