{"action":"Upgrade dydx-v4-client to 1.1.5 or later.","affected":[{"fixed":"1.1.5","introduced":"1.1.5.post1"}],"component":"dydx-v4-client","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["1.1.5"],"ghsa_id":"GHSA-4f84-67cv-qrv3","id":"tcs_01M5KEXZ0BSEW10SWYGRAD0QCY","modified_at":"2026-09-10T03:50:34.127000093Z","published_at":"2026-02-06T19:37:26Z","references":["https://osv.dev/vulnerability/GHSA-4f84-67cv-qrv3","https://github.com/lenktn/lenktn-dydx-v4-python","https://github.com/pypa/advisory-database/tree/main/vulns/dydx-v4-client/PYSEC-2026-1.yaml","https://inspector.pypi.io/project/dydx-v4-client/1.1.5.post1/packages/4b/06/4d848676e932b0fc9d707bb78603dc76555141cc832819cd1e5077bdf2a2/dydx_v4_client-1.1.5.post1.tar.gz/dydx_v4_client-1.1.5.post1/dydx_v4_client/_bootstrap.py#line.18"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-4f84-67cv-qrv3","url":"https://osv.dev/vulnerability/GHSA-4f84-67cv-qrv3"}],"summary":"A single post-release of dydx-v4-client contained obfuscated multi-stage loader"}