{"action":"Upgrade in-toto to 2.0.0 or later.","affected":[{"fixed":"2.0.0","introduced":"0"}],"component":"in-toto","cve_ids":["CVE-2023-32076"],"ecosystem":"PyPI","epss":0.00243,"exploited":false,"fixed_versions":["2.0.0"],"ghsa_id":"GHSA-wc64-c5rv-32pf","id":"tcs_01M5KG1YAH814T9CD6SWVB9DHF","modified_at":"2026-02-04T04:31:45.728286Z","published_at":"2023-05-11T20:47:56Z","references":["https://osv.dev/vulnerability/GHSA-wc64-c5rv-32pf","https://github.com/in-toto/docs/security/advisories/GHSA-p86f-xmg6-9q4x","https://github.com/in-toto/in-toto/security/advisories/GHSA-wc64-c5rv-32pf","https://nvd.nist.gov/vuln/detail/CVE-2023-32076","https://github.com/in-toto/in-toto/commit/3a21d84f40811b7d191fa7bd17265c1f99599afd","https://github.com/in-toto/in-toto","https://github.com/in-toto/in-toto/releases/tag/v2.0.0","https://github.com/pypa/advisory-database/tree/main/vulns/in-toto/PYSEC-2023-63.yaml","https://specifications.freedesktop.org/basedir-spec/basedir-spec-latest.html"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-wc64-c5rv-32pf","url":"https://osv.dev/vulnerability/GHSA-wc64-c5rv-32pf"}],"summary":"in-toto vulnerable to Configuration Read From Local Directory"}