{"action":"Upgrade fickling to 0.1.9 or later.","affected":[{"fixed":"0.1.9","introduced":"0"}],"component":"fickling","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["0.1.9"],"ghsa_id":"GHSA-5hwf-rc88-82xm","id":"tcs_01M5KF155GGEFP176BCK5Z4PDC","modified_at":"2026-03-04T21:49:44.899883Z","published_at":"2026-03-04T21:31:03Z","references":["https://osv.dev/vulnerability/GHSA-5hwf-rc88-82xm","https://github.com/trailofbits/fickling/security/advisories/GHSA-5hwf-rc88-82xm","https://github.com/trailofbits/fickling/commit/ffac3479dbb97a7a1592d85991888562d34dd05b","https://github.com/trailofbits/fickling"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-5hwf-rc88-82xm","url":"https://osv.dev/vulnerability/GHSA-5hwf-rc88-82xm"}],"summary":"Fickling missing RCE-capable modules in UNSAFE_IMPORTS"}