{"action":"Upgrade mobsf to 3.9.7 or later.","affected":[{"fixed":"3.9.7","introduced":"0"}],"component":"mobsf","cve_ids":["CVE-2024-54000"],"ecosystem":"PyPI","epss":0.00413,"exploited":false,"fixed_versions":["3.9.7"],"ghsa_id":"GHSA-m435-9v6r-v5f6","id":"tcs_01M5KFQ4MY50DK55XFTV93XP29","modified_at":"2025-06-27T21:15:17.036662Z","published_at":"2025-06-27T20:43:48Z","references":["https://osv.dev/vulnerability/GHSA-m435-9v6r-v5f6","https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-m435-9v6r-v5f6","https://nvd.nist.gov/vuln/detail/CVE-2024-54000","https://github.com/MobSF/Mobile-Security-Framework-MobSF/commit/f22c584aa7d43527970c9da61eb678953cfc0a8e","https://github.com/MobSF/Mobile-Security-Framework-MobSF","https://github.com/pypa/advisory-database/tree/main/vulns/mobsf/PYSEC-2024-256.yaml"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-m435-9v6r-v5f6","url":"https://osv.dev/vulnerability/GHSA-m435-9v6r-v5f6"}],"summary":"MobSF vulnerability allows SSRF due to the allow_redirects=True parameter"}