{"action":"Upgrade lief to 0.12.1 or later.","affected":[{"fixed":"0.12.1","introduced":"0"}],"component":"lief","cve_ids":["CVE-2022-38307"],"ecosystem":"PyPI","epss":0.00304,"exploited":false,"fixed_versions":["0.12.1"],"ghsa_id":"GHSA-x2xx-jw5m-5j86","id":"tcs_01M5KG37P5JFPQ23RA1NTWSDPE","modified_at":"2024-02-16T08:18:48.304136Z","published_at":"2022-09-14T00:00:42Z","references":["https://osv.dev/vulnerability/GHSA-x2xx-jw5m-5j86","https://nvd.nist.gov/vuln/detail/CVE-2022-38307","https://github.com/lief-project/LIEF/issues/764","https://github.com/lief-project/LIEF/commit/7acf0bc4224081d4f425fcc8b2e361b95291d878","https://github.com/pypa/advisory-database/tree/main/vulns/lief/PYSEC-2022-275.yaml"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-x2xx-jw5m-5j86","url":"https://osv.dev/vulnerability/GHSA-x2xx-jw5m-5j86"}],"summary":"LIEF contains segmentation violation"}