{"action":"Upgrade autogluon-multimodal to 0.4.3 or later.","affected":[{"fixed":"0.4.3","introduced":"0.4.0"},{"fixed":"0.5.2","introduced":"0.5.0"}],"component":"autogluon-multimodal","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["0.4.3","0.5.2"],"ghsa_id":"GHSA-6h2x-4gjf-jc5w","id":"tcs_01M5KF3DNYK54ZTFR1N0BBHBXE","modified_at":"2024-12-02T05:42:36.343453Z","published_at":"2022-09-21T21:42:05Z","references":["https://osv.dev/vulnerability/GHSA-6h2x-4gjf-jc5w","https://github.com/awslabs/autogluon/security/advisories/GHSA-6h2x-4gjf-jc5w","https://github.com/awslabs/autogluon/pull/1987","https://github.com/awslabs/autogluon/commit/23a37e74e58d03055c84a1b89c5af6c3db296b5e","https://github.com/awslabs/autogluon"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-6h2x-4gjf-jc5w","url":"https://osv.dev/vulnerability/GHSA-6h2x-4gjf-jc5w"}],"summary":"autogluon.multimodal vulnerable to unsafe YAML deserialization"}