{"action":"Upgrade hail to 0.2.127 or later.","affected":[{"fixed":"0.2.127","introduced":"0"}],"component":"hail","cve_ids":["CVE-2023-51663"],"ecosystem":"PyPI","epss":0.00367,"exploited":false,"fixed_versions":["0.2.127"],"ghsa_id":"GHSA-487p-qx68-5vjw","id":"tcs_01M5KEXJZ56JF0BAF48QRSSZ8S","modified_at":"2026-09-10T03:50:04.803002682Z","published_at":"2024-01-02T16:40:58Z","references":["https://osv.dev/vulnerability/GHSA-487p-qx68-5vjw","https://github.com/hail-is/hail/security/advisories/GHSA-487p-qx68-5vjw","https://nvd.nist.gov/vuln/detail/CVE-2023-51663","https://github.com/hail-is/hail/commit/0dcc17ff24564b6f5592261d7975e8afd0f95de7","https://github.com/hail-is/hail","https://github.com/pypa/advisory-database/tree/main/vulns/hail/PYSEC-2023-271.yaml"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-487p-qx68-5vjw","url":"https://osv.dev/vulnerability/GHSA-487p-qx68-5vjw"}],"summary":"Hail relies on OIDC email claims to verify the validity of a user's domain."}