{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.3.1"}],"component":"ai-flow","cve_ids":["CVE-2024-0960"],"ecosystem":"PyPI","epss":0.00719,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-7mgg-3rq2-hff4","id":"tcs_01M5KF68AZJPTEKF9QATC44T7N","modified_at":"2026-07-07T17:57:22.428359245Z","published_at":"2024-01-27T12:30:25Z","references":["https://osv.dev/vulnerability/GHSA-7mgg-3rq2-hff4","https://nvd.nist.gov/vuln/detail/CVE-2024-0960","https://github.com/bayuncao/vul-cve-8","https://github.com/bayuncao/vul-cve-8/blob/main/dataset.pkl","https://github.com/flink-extended/ai-flow","https://vuldb.com/?ctiid.252205","https://vuldb.com/?id.252205"],"severity":{"label":"medium","score":5},"sources":[{"source":"osv","source_id":"GHSA-7mgg-3rq2-hff4","url":"https://osv.dev/vulnerability/GHSA-7mgg-3rq2-hff4"}],"summary":"ai-flow Deserialization of Untrusted Data vulnerability"}