{"action":"Upgrade unicorn to 2.0.0rc1 or later.","affected":[{"fixed":"2.0.0rc1","introduced":"0"}],"component":"unicorn","cve_ids":["CVE-2021-44078"],"ecosystem":"PyPI","epss":0.00546,"exploited":false,"fixed_versions":["2.0.0rc1"],"id":"tcs_01M5KGFQAVGA5VFB95M4P62FMG","modified_at":"2023-11-08T04:07:15.451665Z","published_at":"2021-12-26T05:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2021-868","https://gist.github.com/jwang-a/cb4b6e9551457aa299066076b836a2cd","https://github.com/unicorn-engine/unicorn/compare/2.0.0-rc4...2.0.0-rc5","https://github.com/jwang-a/CTF/blob/master/MyChallenges/Pwn/Unicorns_Aisle/UnicornsAisle.pdf","https://github.com/unicorn-engine/unicorn/commit/c733bbada356b0373fa8aa72c044574bb855fd24","https://www.unicorn-engine.org/changelog/"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2021-868","url":"https://osv.dev/vulnerability/PYSEC-2021-868"}],"summary":"An issue was discovered in split_region in uc.c in Unicorn Engine before 2.0.0-rc5. It allows local attackers to escape the sandbox. An attacker must first obtain the ability to execute crafted code i"}