{"action":"Upgrade torrentpier/torrentpier to 2.4.4 or later.","affected":[{"fixed":"2.4.4","introduced":"0"}],"component":"torrentpier/torrentpier","cve_ids":["CVE-2024-40624"],"ecosystem":"Packagist","epss":0.00995,"exploited":false,"fixed_versions":["2.4.4"],"ghsa_id":"GHSA-fg86-4c2r-7wxw","id":"tcs_01M5KF1SDW35GHRH0J6J4XPQ8E","modified_at":"2026-05-13T13:55:20.332759Z","published_at":"2024-07-15T17:48:26Z","references":["https://osv.dev/vulnerability/GHSA-fg86-4c2r-7wxw","https://github.com/torrentpier/torrentpier/security/advisories/GHSA-fg86-4c2r-7wxw","https://nvd.nist.gov/vuln/detail/CVE-2024-40624","https://github.com/torrentpier/torrentpier/commit/ed37e6e522f345f2b46147c6f53c1ab6dec1db9e","https://github.com/torrentpier/torrentpier","https://github.com/torrentpier/torrentpier/blob/84f6c9f4a081d9ffff4c233098758280304bf50f/library/includes/functions.php#L41-L60"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-fg86-4c2r-7wxw","url":"https://osv.dev/vulnerability/GHSA-fg86-4c2r-7wxw"}],"summary":"TorrentPier Deserialization of Untrusted Data vulnerability"}