{"action":"Upgrade chatterbot to 1.2.14 or later.","affected":[{"fixed":"1.2.14","introduced":"0"}],"component":"chatterbot","cve_ids":["CVE-2026-58198"],"ecosystem":"PyPI","epss":0.00139,"exploited":false,"fixed_versions":["1.2.14"],"ghsa_id":"GHSA-wvrh-2f4m-924v","id":"tcs_01M5KG2YNWV7PAQBH04YMAQEV1","modified_at":"2026-07-10T04:11:44.950774104Z","published_at":"2026-06-19T22:08:08Z","references":["https://osv.dev/vulnerability/GHSA-wvrh-2f4m-924v","https://github.com/gunthercox/ChatterBot/security/advisories/GHSA-wvrh-2f4m-924v","https://github.com/gunthercox/ChatterBot"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-wvrh-2f4m-924v","url":"https://osv.dev/vulnerability/GHSA-wvrh-2f4m-924v"}],"summary":"ChatterBot: Symlink-Following Arbitrary Write via UbuntuCorpusTrainer"}