{"action":"Upgrade opencanary to 0.9.5 or later.","affected":[{"fixed":"0.9.5","introduced":"0"}],"component":"opencanary","cve_ids":["CVE-2024-48911"],"ecosystem":"PyPI","epss":0.00223,"exploited":false,"fixed_versions":["0.9.5"],"ghsa_id":"GHSA-pf5v-pqfv-x8jj","id":"tcs_01M5KFSW0MGHCSGA2D91546YYT","modified_at":"2025-05-16T22:39:09.404195Z","published_at":"2024-10-14T21:16:12Z","references":["https://osv.dev/vulnerability/GHSA-pf5v-pqfv-x8jj","https://github.com/thinkst/opencanary/security/advisories/GHSA-pf5v-pqfv-x8jj","https://nvd.nist.gov/vuln/detail/CVE-2024-48911","https://github.com/thinkst/opencanary/commit/2c11575b1a3dd8b0df26a879ba856c0aa350c049","https://github.com/pypa/advisory-database/tree/main/vulns/opencanary/PYSEC-2024-248.yaml","https://github.com/thinkst/opencanary","https://github.com/thinkst/opencanary/releases/tag/v0.9.4"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"GHSA-pf5v-pqfv-x8jj","url":"https://osv.dev/vulnerability/GHSA-pf5v-pqfv-x8jj"}],"summary":"OpenCanary Executes Commands From Potentially Writable Config File"}