{"action":"Upgrade transmute-core to 1.13.5 or later.","affected":[{"fixed":"1.13.5","introduced":"0"}],"component":"transmute-core","cve_ids":["CVE-2023-47204"],"ecosystem":"PyPI","epss":0.00951,"exploited":false,"fixed_versions":["1.13.5"],"ghsa_id":"GHSA-w9cp-3x79-2p8p","id":"tcs_01M5KG1VMTZGZ6P590MCV4NHF5","modified_at":"2024-11-18T22:26:54.662856Z","published_at":"2023-11-02T06:30:25Z","references":["https://osv.dev/vulnerability/GHSA-w9cp-3x79-2p8p","https://nvd.nist.gov/vuln/detail/CVE-2023-47204","https://github.com/toumorokoshi/transmute-core/pull/58","https://github.com/toumorokoshi/transmute-core/commit/29bf82eb8ed9926d31eec90aec482ecc0dcb23f0","https://github.com/pypa/advisory-database/tree/main/vulns/transmute-core/PYSEC-2023-223.yaml","https://github.com/toumorokoshi/transmute-core","https://github.com/toumorokoshi/transmute-core/releases/tag/v1.13.5"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-w9cp-3x79-2p8p","url":"https://osv.dev/vulnerability/GHSA-w9cp-3x79-2p8p"}],"summary":"transmute-core unsafe YAML deserialization vulnerability"}