{"action":"Upgrade mlalchemy to 0.2.2 or later.","affected":[{"fixed":"0.2.2","introduced":"0"}],"component":"mlalchemy","cve_ids":["CVE-2017-16615"],"ecosystem":"PyPI","epss":0.03445,"exploited":false,"fixed_versions":["0.2.2"],"ghsa_id":"GHSA-xpm8-98mx-h4c5","id":"tcs_01M5KG4GSBHGGWQA1XDZ30JFMV","modified_at":"2025-02-14T05:28:40.304883Z","published_at":"2018-07-13T16:01:07Z","references":["https://osv.dev/vulnerability/GHSA-xpm8-98mx-h4c5","https://nvd.nist.gov/vuln/detail/CVE-2017-16615","https://github.com/thanethomson/MLAlchemy/issues/1","https://github.com/thanethomson/MLAlchemy/commit/bc795757febdcce430d89f9d08f75c32d6989d3c","https://github.com/pypa/advisory-database/tree/main/vulns/mlalchemy/PYSEC-2017-19.yaml","https://github.com/thanethomson/MLAlchemy","https://joel-malwarebenchmark.github.io/blog/2017/11/08/cve-2017-16615-critical-restful-web-applications-vulnerability"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-xpm8-98mx-h4c5","url":"https://osv.dev/vulnerability/GHSA-xpm8-98mx-h4c5"}],"summary":"Unsafe deserialization in MLAlchemy"}