{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.1.1"}],"component":"agentscope","cve_ids":["CVE-2024-8551"],"ecosystem":"PyPI","epss":0.01022,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-j9rw-qm5f-r8xm","id":"tcs_01M5KFNK63NX1SCKPRJYHR3EWM","modified_at":"2026-06-29T12:26:17.213710494Z","published_at":"2025-03-20T12:32:48Z","references":["https://osv.dev/vulnerability/GHSA-j9rw-qm5f-r8xm","https://nvd.nist.gov/vuln/detail/CVE-2024-8551","https://github.com/modelscope/agentscope","https://github.com/modelscope/agentscope/blob/01530ee6a99c86426aab1be11ec3b3b86ca640ac/src/agentscope/studio/_app.py#L680","https://huntr.com/bounties/e0c0c294-f1e2-4f2c-a632-a9be9fd06989"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-j9rw-qm5f-r8xm","url":"https://osv.dev/vulnerability/GHSA-j9rw-qm5f-r8xm"}],"summary":"AgentScope path traversal vulnerability in save-workflow"}