{"action":"Upgrade epyt-flow to 0.16.1 or later.","affected":[{"fixed":"0.16.1","introduced":"0"}],"component":"epyt-flow","cve_ids":["CVE-2026-25632"],"ecosystem":"PyPI","epss":0.01423,"exploited":false,"fixed_versions":["0.16.1"],"ghsa_id":"GHSA-74vm-8frp-7w68","id":"tcs_01M5KF4VNF25K16J0S2VT3T55W","modified_at":"2026-06-29T12:26:34.728256183Z","published_at":"2026-02-04T20:34:28Z","references":["https://osv.dev/vulnerability/GHSA-74vm-8frp-7w68","https://github.com/WaterFutures/EPyT-Flow/security/advisories/GHSA-74vm-8frp-7w68","https://nvd.nist.gov/vuln/detail/CVE-2026-25632","https://github.com/WaterFutures/EPyT-Flow/commit/3fff9151494c7dbc72073830b734f0a7e550e385","https://github.com/WaterFutures/EPyT-Flow","https://github.com/WaterFutures/EPyT-Flow/releases/tag/v0.16.1"],"severity":{"label":"critical","score":10},"sources":[{"source":"osv","source_id":"GHSA-74vm-8frp-7w68","url":"https://osv.dev/vulnerability/GHSA-74vm-8frp-7w68"}],"summary":"EPyT-Flow vulnerable to unsafe JSON deserialization (__type__)"}