{"action":"No fix published. Pin and monitor.","affected":[],"component":"gratient","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-xm4r-5rj9-2pg3","id":"tcs_01M5KG4CKM8KE1QFQQC72GYS9Q","modified_at":"2024-08-30T23:37:05Z","published_at":"2024-08-30T23:37:05Z","references":["https://osv.dev/vulnerability/GHSA-xm4r-5rj9-2pg3","https://github.com/pypa/advisory-database/tree/main/vulns/gratient/PYSEC-2024-1.yaml","https://inspector.pypi.io/project/gratient/0.5/packages/c5/c5/353e45fa57fa5f1b2b42fa24a029cdfb018d7263850fb43b6d6352157734/gratient-0.5-py3-none-any.whl/gratient/__init__.py#line.4","https://pypi.org/project/gratient"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-xm4r-5rj9-2pg3","url":"https://osv.dev/vulnerability/GHSA-xm4r-5rj9-2pg3"}],"summary":"gratient 0.5 contains credential harvesting code"}