{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.0.1.dev0"}],"component":"inspiremusic","cve_ids":["CVE-2025-5148"],"ecosystem":"PyPI","epss":0.00207,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-pgp9-g5q8-j3wp","id":"tcs_01M5KFT1XDBR8CPFK0FAB9A6FZ","modified_at":"2026-07-07T17:56:50.850138192Z","published_at":"2025-05-25T12:30:24Z","references":["https://osv.dev/vulnerability/GHSA-pgp9-g5q8-j3wp","https://nvd.nist.gov/vuln/detail/CVE-2025-5148","https://github.com/FunAudioLLM/InspireMusic/issues/53","https://github.com/FunAudioLLM/InspireMusic/issues/53#issuecomment-2866688220","https://github.com/FunAudioLLM/InspireMusic/commit/784cbf8dde2cf1456ff808aeba23177e1810e7a9","https://github.com/FunAudioLLM/InspireMusic","https://vuldb.com/?ctiid.310236","https://vuldb.com/?id.310236","https://vuldb.com/?submit.573800"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-pgp9-g5q8-j3wp","url":"https://osv.dev/vulnerability/GHSA-pgp9-g5q8-j3wp"}],"summary":"FunAudioLLM InspireMusic deserialization vulnerability"}