{"action":"Upgrade frigate to 0.13.2 or later.","affected":[{"fixed":"0.13.2","introduced":"0"}],"component":"frigate","cve_ids":["CVE-2024-32874"],"ecosystem":"PyPI","epss":0.00774,"exploited":false,"fixed_versions":["0.13.2"],"ghsa_id":"GHSA-w4h6-9wrp-v5jq","id":"tcs_01M5KG1C0SWMA4W232NVWZ8SDR","modified_at":"2026-09-10T03:50:14.442713581Z","published_at":"2024-05-09T15:13:49Z","references":["https://osv.dev/vulnerability/GHSA-w4h6-9wrp-v5jq","https://github.com/blakeblackshear/frigate/security/advisories/GHSA-w4h6-9wrp-v5jq","https://nvd.nist.gov/vuln/detail/CVE-2024-32874","https://github.com/blakeblackshear/frigate/commit/cc851555e4029647986dccc8b8ecf54afee31442","https://github.com/blakeblackshear/frigate","https://github.com/blakeblackshear/frigate/blob/d7ae0eedf89e14f297093ac5c8042862034cbaeb/frigate/api/media.py#L1346C46-L1346C55","https://github.com/blakeblackshear/frigate/blob/d7ae0eedf89e14f297093ac5c8042862034cbaeb/frigate/api/media.py#L408C33-L408C78","https://github.com/blakeblackshear/frigate/blob/d7ae0eedf89e14f297093ac5c8042862034cbaeb/frigate/api/media.py#L646C25-L646C47","https://github.com/blakeblackshear/frigate/blob/d7ae0eedf89e14f297093ac5c8042862034cbaeb/frigate/api/media.py#L684C9-L684C59","https://github.com/blakeblackshear/frigate/blob/d7ae0eedf89e14f297093ac5c8042862034cbaeb/frigate/api/media.py#L705C42-L705C88","https://github.com/blakeblackshear/frigate/blob/d7ae0eedf89e14f297093ac5c8042862034cbaeb/frigate/api/media.py#L728C38-L728C80"],"severity":{"label":"critical","score":9.3},"sources":[{"source":"osv","source_id":"GHSA-w4h6-9wrp-v5jq","url":"https://osv.dev/vulnerability/GHSA-w4h6-9wrp-v5jq"}],"summary":"Malicious Long Unicode filenames may cause a Multiple Application-level Denial of Service"}