{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"4.1.1"}],"component":"taipy","cve_ids":["CVE-2026-48544"],"ecosystem":"PyPI","epss":0.0052,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-28gh-q3gw-pvx8","id":"tcs_01M5KES7SGN3604ZH4ZQQ94PPJ","modified_at":"2026-07-13T16:43:52.476579605Z","published_at":"2026-05-27T15:33:26Z","references":["https://osv.dev/vulnerability/GHSA-28gh-q3gw-pvx8","https://nvd.nist.gov/vuln/detail/CVE-2026-48544","https://github.com/Avaiga/taipy/issues/2868","https://github.com/Avaiga/taipy/pull/2871","https://github.com/Avaiga/taipy/commit/129fd407ffca49ee4ab853772c88d0c873e038dd","https://github.com/Avaiga/taipy","https://www.vulncheck.com/advisories/taipy-path-traversal-via-elementlibrary-get-resource"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-28gh-q3gw-pvx8","url":"https://osv.dev/vulnerability/GHSA-28gh-q3gw-pvx8"}],"summary":"Taipy contains a path traversal vulnerability"}