{"action":"Upgrade diffoscope to 76 or later.","affected":[{"fixed":"76","introduced":"0"}],"component":"diffoscope","cve_ids":["CVE-2017-0359"],"ecosystem":"PyPI","epss":0.02245,"exploited":false,"fixed_versions":["76"],"ghsa_id":"GHSA-8p5c-f328-9fvv","id":"tcs_01M5KF8PC5V5BQPDBDZT4G8AYP","modified_at":"2025-02-15T06:00:51.986722Z","published_at":"2018-07-13T16:01:21Z","references":["https://osv.dev/vulnerability/GHSA-8p5c-f328-9fvv","https://nvd.nist.gov/vuln/detail/CVE-2017-0359","https://github.com/anthraxx/diffoscope/commit/632a40828a54b399787c25e7fa243f732aef7e05","https://github.com/anthraxx/diffoscope/commit/f379d1f611dbd5d361e12b732e07c8aee45ff226","https://bugs.debian.org/854723","https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854723","https://github.com/advisories/GHSA-8p5c-f328-9fvv","https://github.com/anthraxx/diffoscope","https://github.com/pypa/advisory-database/tree/main/vulns/diffoscope/PYSEC-2018-83.yaml","https://security-tracker.debian.org/tracker/CVE-2017-0359"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-8p5c-f328-9fvv","url":"https://osv.dev/vulnerability/GHSA-8p5c-f328-9fvv"}],"summary":"Diffoscope may write to arbitrary locations due to an untrusted archive"}