{"action":"Upgrade modelscope to 1.27.0 or later.","affected":[{"fixed":"1.27.0","introduced":"0"}],"component":"modelscope","cve_ids":["CVE-2025-51427"],"ecosystem":"PyPI","epss":0.00522,"exploited":false,"fixed_versions":["1.27.0"],"ghsa_id":"GHSA-fhhq-h4hg-549x","id":"tcs_01M5KFFDBGY8SDBEWHD0YN0ED0","modified_at":"2026-07-13T16:42:27.445121464Z","published_at":"2026-05-19T15:31:35Z","references":["https://osv.dev/vulnerability/GHSA-fhhq-h4hg-549x","https://nvd.nist.gov/vuln/detail/CVE-2025-51427","https://github.com/modelscope/modelscope/issues/1331","https://github.com/modelscope/modelscope/pull/1333","https://github.com/modelscope/modelscope/commit/75d54927e112261d39598ca08c15b66a7ff3f735","https://github.com/JIRUWOZHI/vulnerability-disclosure/blob/main/CVE-2025-51427/CVE_2025_51427.md","https://github.com/modelscope/modelscope"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-fhhq-h4hg-549x","url":"https://osv.dev/vulnerability/GHSA-fhhq-h4hg-549x"}],"summary":"ModelScope is vulnerable to arbitrary code injection via a crafted module"}