{"action":"Upgrade safety to 1.9.0 or later.","affected":[{"fixed":"1.9.0","introduced":"0"}],"component":"safety","cve_ids":["CVE-2020-5252"],"ecosystem":"PyPI","epss":0.00366,"exploited":false,"fixed_versions":["1.9.0"],"ghsa_id":"GHSA-7q25-qrjw-6fg2","id":"tcs_01M5KF6DR1GW3RVAE39Q8D6NGQ","modified_at":"2026-07-08T06:28:50.842902785Z","published_at":"2020-03-24T15:07:56Z","references":["https://osv.dev/vulnerability/GHSA-7q25-qrjw-6fg2","https://github.com/pyupio/safety/security/advisories/GHSA-7q25-qrjw-6fg2","https://nvd.nist.gov/vuln/detail/CVE-2020-5252","https://github.com/akoumjian/python-safety-vuln","https://github.com/pypa/advisory-database/tree/main/vulns/safety/PYSEC-2020-101.yaml","https://github.com/pyupio/safety","https://mulch.dev/blog/CVE-2020-5252-python-safety-vuln","https://pyup.io/posts/patched-vulnerability"],"severity":{"label":"medium","score":5},"sources":[{"source":"osv","source_id":"GHSA-7q25-qrjw-6fg2","url":"https://osv.dev/vulnerability/GHSA-7q25-qrjw-6fg2"}],"summary":"Malicious package may avoid detection in python auditing"}