{"action":"Upgrade graphitedb to 0.2 or later.","affected":[{"fixed":"0.2","introduced":"0"}],"component":"graphitedb","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["0.2"],"ghsa_id":"GHSA-qw48-84f6-28gv","id":"tcs_01M5KFWQT4PW7FWAQ2GT9E7TPV","modified_at":"2026-05-18T13:49:01.072277Z","published_at":"2026-05-18T13:27:55Z","references":["https://osv.dev/vulnerability/GHSA-qw48-84f6-28gv","https://github.com/mkh-user/graphite/security/advisories/GHSA-qw48-84f6-28gv","https://github.com/mkh-user/graphite","https://github.com/mkh-user/graphite/releases/tag/v0.2"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"GHSA-qw48-84f6-28gv","url":"https://osv.dev/vulnerability/GHSA-qw48-84f6-28gv"}],"summary":"Graphite Has a Pickle Deserialization Vulnerability"}