{"action":"Upgrade xalpha to 0.11.9 or later.","affected":[{"fixed":"0.11.9","introduced":"0.11.4"}],"component":"xalpha","cve_ids":["CVE-2023-37659"],"ecosystem":"PyPI","epss":0.01701,"exploited":false,"fixed_versions":["0.11.9"],"ghsa_id":"GHSA-jx3q-5rgf-vrrr","id":"tcs_01M5KFPSMCPBCD9J2Z5HS2QX3K","modified_at":"2024-11-19T19:22:53.707553Z","published_at":"2023-07-11T15:31:18Z","references":["https://osv.dev/vulnerability/GHSA-jx3q-5rgf-vrrr","https://nvd.nist.gov/vuln/detail/CVE-2023-37659","https://github.com/refraction-ray/xalpha/issues/175","https://github.com/refraction-ray/xalpha/commit/6dceaa159a1a319d750ade20a4595956876657b6","https://github.com/pypa/advisory-database/tree/main/vulns/xalpha/PYSEC-2023-116.yaml","https://github.com/refraction-ray/xalpha"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-jx3q-5rgf-vrrr","url":"https://osv.dev/vulnerability/GHSA-jx3q-5rgf-vrrr"}],"summary":"xalpha vulnerable to Remote Code Execution"}