{"action":"Upgrade owlmixin to 2.0.0 or later.","affected":[{"fixed":"2.0.0","introduced":"0"}],"component":"owlmixin","cve_ids":["CVE-2017-16618"],"ecosystem":"PyPI","epss":0.04473,"exploited":false,"fixed_versions":["2.0.0"],"ghsa_id":"GHSA-ccmq-qvcp-5mrm","id":"tcs_01M5KFCQ36F4HZNQT5ZJP8BZY7","modified_at":"2024-10-07T21:25:43.524284Z","published_at":"2018-07-13T16:01:12Z","references":["https://osv.dev/vulnerability/GHSA-ccmq-qvcp-5mrm","https://nvd.nist.gov/vuln/detail/CVE-2017-16618","https://github.com/tadashi-aikawa/owlmixin/issues/12","https://github.com/tadashi-aikawa/owlmixin/commit/5d0575303f6df869a515ced4285f24ba721e0d4e","https://github.com/advisories/GHSA-ccmq-qvcp-5mrm","https://github.com/pypa/advisory-database/tree/main/vulns/owlmixin/PYSEC-2017-22.yaml","https://github.com/tadashi-aikawa/owlmixin","https://joel-malwarebenchmark.github.io/blog/2017/11/08/cve-2017-16618-convert-through-owlmixin"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-ccmq-qvcp-5mrm","url":"https://osv.dev/vulnerability/GHSA-ccmq-qvcp-5mrm"}],"summary":"Unsafe deserialization in owlmixin"}