{"action":"Upgrade horovod to 0.24.0 or later.","affected":[{"fixed":"0.24.0","introduced":"0"}],"component":"horovod","cve_ids":["CVE-2022-0315"],"ecosystem":"PyPI","epss":0.00959,"exploited":false,"fixed_versions":["0.24.0"],"ghsa_id":"GHSA-47wv-vhj2-g66m","id":"tcs_01M5KEXH9C5R4P9WRRVPVG8W59","modified_at":"2024-09-20T21:43:02.531163Z","published_at":"2022-03-29T19:18:32Z","references":["https://osv.dev/vulnerability/GHSA-47wv-vhj2-g66m","https://github.com/horovod/horovod/security/advisories/GHSA-47wv-vhj2-g66m","https://nvd.nist.gov/vuln/detail/CVE-2022-0315","https://github.com/horovod/horovod/pull/3358","https://github.com/horovod/horovod/commit/b96ecae4dc69fc0a83c7c2d3f1dde600c20a1b41","https://github.com/advisories/GHSA-47wv-vhj2-g66m","https://github.com/horovod/horovod","https://github.com/pypa/advisory-database/tree/main/vulns/horovod/PYSEC-2022-175.yaml","https://huntr.dev/bounties/7e50397b-dd63-4bb5-b56d-704094a7da45"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GHSA-47wv-vhj2-g66m","url":"https://osv.dev/vulnerability/GHSA-47wv-vhj2-g66m"}],"summary":"Use of insecure temporary file in Horovod"}