{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.4.0"}],"component":"dgl","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-3x5x-fw77-g54c","id":"tcs_01M5KEWRMGZZWCW676889HDRWA","modified_at":"2025-03-05T20:09:21.358666Z","published_at":"2025-03-05T19:50:09Z","references":["https://osv.dev/vulnerability/GHSA-3x5x-fw77-g54c","https://github.com/dmlc/dgl/security/advisories/GHSA-3x5x-fw77-g54c","https://github.com/dmlc/dgl/issues/7874","https://github.com/dmlc/dgl"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-3x5x-fw77-g54c","url":"https://osv.dev/vulnerability/GHSA-3x5x-fw77-g54c"}],"summary":"dmlc/dgl Vulnerable to Remote Code Execution by Pickle Deserialization via rpc.recv_request()"}