{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"3.23.0"}],"component":"aim","cve_ids":["CVE-2024-8061"],"ecosystem":"PyPI","epss":0.00482,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-6w7p-xrvp-p7xv","id":"tcs_01M5KF4AYB0YDRY7P3B1ZVCP30","modified_at":"2026-07-07T17:56:15.502161788Z","published_at":"2025-03-20T12:32:47Z","references":["https://osv.dev/vulnerability/GHSA-6w7p-xrvp-p7xv","https://nvd.nist.gov/vuln/detail/CVE-2024-8061","https://github.com/aimhubio/aim","https://github.com/aimhubio/aim/blob/a6c6f2fee0f1abe37c1d66701b0329fb6af31a3d/aim/ext/transport/client.py#L258","https://huntr.com/bounties/c85d005c-b354-4c51-a88f-adda2f09622b"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-6w7p-xrvp-p7xv","url":"https://osv.dev/vulnerability/GHSA-6w7p-xrvp-p7xv"}],"summary":"Aim allows denial of service due to no timeouts for some tracking server endpoints"}