{"action":"Upgrade diffoscope to 256 or later.","affected":[{"fixed":"256","introduced":"0"}],"component":"diffoscope","cve_ids":["CVE-2024-25711"],"ecosystem":"PyPI","epss":0.00987,"exploited":false,"fixed_versions":["256"],"ghsa_id":"GHSA-33w6-hvmq-gh4x","id":"tcs_01M5KETSF97TZ4GQX3Z650MJ2V","modified_at":"2024-12-05T05:37:11.490459Z","published_at":"2024-02-27T03:31:03Z","references":["https://osv.dev/vulnerability/GHSA-33w6-hvmq-gh4x","https://nvd.nist.gov/vuln/detail/CVE-2024-25711","https://github.com/pypa/advisory-database/tree/main/vulns/diffoscope/PYSEC-2024-41.yaml","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OUNBANAWD6TZH2NRRV4YUIAXEHLUJQ47","https://salsa.debian.org/reproducible-builds/diffoscope","https://salsa.debian.org/reproducible-builds/diffoscope/-/commit/dfed769904c27d66a14a5903823d9c8c5aae860e","https://salsa.debian.org/reproducible-builds/diffoscope/-/issues/361"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-33w6-hvmq-gh4x","url":"https://osv.dev/vulnerability/GHSA-33w6-hvmq-gh4x"}],"summary":"diffoscope Path Traversal vulnerability"}