{"action":"Upgrade mage-ai to 0.8.72 or later.","affected":[{"fixed":"0.8.72","introduced":"0.8.34"}],"component":"mage-ai","cve_ids":["CVE-2023-31143"],"ecosystem":"PyPI","epss":0.00659,"exploited":false,"fixed_versions":["0.8.72"],"ghsa_id":"GHSA-c6mm-2g84-v4m7","id":"tcs_01M5KFCC4H77PEYSJNCHYDR087","modified_at":"2024-09-30T17:01:34.013781Z","published_at":"2023-05-05T23:10:44Z","references":["https://osv.dev/vulnerability/GHSA-c6mm-2g84-v4m7","https://github.com/mage-ai/mage-ai/security/advisories/GHSA-c6mm-2g84-v4m7","https://nvd.nist.gov/vuln/detail/CVE-2023-31143","https://github.com/mage-ai/mage-ai/commit/f63cd00f6a3be372397d37a4c9a49bfaf50d7650","https://github.com/mage-ai/mage-ai","https://github.com/pypa/advisory-database/tree/main/vulns/mage-ai/PYSEC-2023-64.yaml"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-c6mm-2g84-v4m7","url":"https://osv.dev/vulnerability/GHSA-c6mm-2g84-v4m7"}],"summary":"Mage-ai missing user authentication"}