{"action":"Upgrade pyrage to 1.2.3 or later.","affected":[{"fixed":"1.2.3","introduced":"1.2.0"}],"component":"pyrage","cve_ids":["CVE-2024-56327"],"ecosystem":"PyPI","epss":0.00499,"exploited":false,"fixed_versions":["1.2.3"],"ghsa_id":"GHSA-47h8-jmp3-9f28","id":"tcs_01M5KEXFW5E7RD3DJHPVSGB929","modified_at":"2026-07-07T17:57:07.259517861Z","published_at":"2024-12-19T15:14:06Z","references":["https://osv.dev/vulnerability/GHSA-47h8-jmp3-9f28","https://github.com/FiloSottile/age/security/advisories/GHSA-32gq-x56h-299c","https://github.com/str4d/rage/security/advisories/GHSA-4fg7-vxc8-qx5w","https://github.com/woodruffw/pyrage/security/advisories/GHSA-47h8-jmp3-9f28","https://nvd.nist.gov/vuln/detail/CVE-2024-56327","https://github.com/advisories/GHSA-4fg7-vxc8-qx5w","https://github.com/woodruffw/pyrage"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-47h8-jmp3-9f28","url":"https://osv.dev/vulnerability/GHSA-47h8-jmp3-9f28"}],"summary":"pyrage vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary execution"}