{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.2.0"}],"component":"confire","cve_ids":["CVE-2017-16763"],"ecosystem":"PyPI","epss":0.04473,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-m85c-9mf8-m2m6","id":"tcs_01M5KFQM31NMZ4YTR3TH2R0CW0","modified_at":"2025-02-15T05:30:25.681979Z","published_at":"2018-07-18T18:28:26Z","references":["https://osv.dev/vulnerability/GHSA-m85c-9mf8-m2m6","https://nvd.nist.gov/vuln/detail/CVE-2017-16763","https://github.com/bbengfort/confire/issues/24","https://github.com/bbengfort/confire/commit/8cc86a5ec2327e070f1d576d61bbaadf861597ea","https://github.com/advisories/GHSA-m85c-9mf8-m2m6","https://github.com/bbengfort/confire","https://github.com/pypa/advisory-database/tree/main/vulns/confire/PYSEC-2017-78.yaml","https://joel-malwarebenchmark.github.io/blog/2017/11/12/cve-2017-16763-configure-loaded-through-confire"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-m85c-9mf8-m2m6","url":"https://osv.dev/vulnerability/GHSA-m85c-9mf8-m2m6"}],"summary":"Unsafe deserialization in confire"}