{"action":"Upgrade pyo3 to 0.23.3 or later.","affected":[{"fixed":"0.23.3","introduced":"0.23.0"}],"component":"pyo3","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.23.3"],"ghsa_id":"GHSA-vxcf-c7mx-pg53","id":"tcs_01M5KF3SN20BGTCS4ZPKD8PNJF","modified_at":"2025-10-28T06:29:26.341277Z","published_at":"2024-12-05T19:06:20Z","references":["https://osv.dev/vulnerability/GHSA-vxcf-c7mx-pg53","https://github.com/PyO3/pyo3/issues/4757","https://github.com/PyO3/pyo3","https://rustsec.org/advisories/RUSTSEC-2024-0409.html"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-vxcf-c7mx-pg53","url":"https://osv.dev/vulnerability/GHSA-vxcf-c7mx-pg53"}],"summary":"Build corruption when using `PYO3_CONFIG_FILE` environment variable"}