{"action":"Upgrade nono-py to 0.10.1 or later.","affected":[{"fixed":"0.10.1","introduced":"0"}],"component":"nono-py","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["0.10.1"],"ghsa_id":"GHSA-m8j6-rc5x-wv36","id":"tcs_01M5KFQNW5RC924RXC59ATPV5K","modified_at":"2026-06-26T20:45:12.226949946Z","published_at":"2026-06-26T20:41:59Z","references":["https://osv.dev/vulnerability/GHSA-m8j6-rc5x-wv36","https://github.com/always-further/nono-py/security/advisories/GHSA-m8j6-rc5x-wv36","https://github.com/nolabs-ai/nono-py/commit/2897ee20df0d75afd298d94840b9d135b3b3a6e9","https://github.com/nolabs-ai/nono-py/commit/807fb4bce2385b9e88185bf160e0792b588813c7","https://github.com/always-further/nono-py"],"severity":{"label":"medium","score":5.2},"sources":[{"source":"osv","source_id":"GHSA-m8j6-rc5x-wv36","url":"https://osv.dev/vulnerability/GHSA-m8j6-rc5x-wv36"}],"summary":"nono-py's policy JSON accepts unknown security fields"}