{"action":"No fix published. Pin and monitor.","affected":[],"component":"sentinelonesdk","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-g86j-hwg9-77q5","id":"tcs_01M5KFH54GS91JCPJS137264NN","modified_at":"2022-12-27T15:25:51Z","published_at":"2022-12-27T15:25:51Z","references":["https://osv.dev/vulnerability/GHSA-g86j-hwg9-77q5","https://pypi.org/project/SentinelOne","https://www.reversinglabs.com/blog/sentinelsneak-malicious-pypi-module-poses-as-security-sdk"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-g86j-hwg9-77q5#PyPI/sentinelonesdk","url":"https://osv.dev/vulnerability/GHSA-g86j-hwg9-77q5"}],"summary":"SentinelOne impersonated via PyPI packages"}