{"action":"Upgrade pycti to 6.1.9 or later.","affected":[{"fixed":"6.1.9","introduced":"0"}],"component":"pycti","cve_ids":["CVE-2024-37155"],"ecosystem":"PyPI","epss":0.00464,"exploited":false,"fixed_versions":["6.1.9"],"ghsa_id":"GHSA-4mvw-j8r9-xcgc","id":"tcs_01M5KEYM693PB1V3KVF8GKTP1P","modified_at":"2026-06-22T17:00:09.270788163Z","published_at":"2026-06-22T16:43:24Z","references":["https://osv.dev/vulnerability/GHSA-4mvw-j8r9-xcgc","https://github.com/OpenCTI-Platform/opencti/security/advisories/GHSA-4mvw-j8r9-xcgc","https://nvd.nist.gov/vuln/detail/CVE-2024-37155","https://github.com/OpenCTI-Platform/opencti/commit/f87d96918c63b0c3d3ebfbea6c789d48e2f56ad5","https://github.com/OpenCTI-Platform/opencti","https://github.com/OpenCTI-Platform/opencti/blob/6343b82b0b0a5d3ded3b30d08ce282328a556268/opencti-platform/opencti-graphql/src/graphql/graphql.js#L83-L94","https://github.com/pypa/advisory-database/tree/main/vulns/pycti/PYSEC-2024-313.yaml"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-4mvw-j8r9-xcgc","url":"https://osv.dev/vulnerability/GHSA-4mvw-j8r9-xcgc"}],"summary":"OpenCTI May Bypass Introspection Restriction"}