{"action":"Upgrade paramiko to 2.9.3 or later.","affected":[{"fixed":"2.9.3","introduced":"0"},{"fixed":"2.10.1","introduced":"2.10.0"}],"component":"paramiko","cve_ids":["CVE-2022-24302"],"ecosystem":"PyPI","epss":0.0208,"exploited":false,"fixed_versions":["2.9.3","2.10.1"],"ghsa_id":"GHSA-f8q4-jwww-x3wv","id":"tcs_01M5KGG9HXE7GYQQQZM7KJ6K83","modified_at":"2023-11-08T04:08:30.555889Z","published_at":"2022-03-17T22:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2022-166","https://www.paramiko.org/changelog.html","https://github.com/paramiko/paramiko/blob/363a28d94cada17f012c1604a3c99c71a2bda003/paramiko/pkey.py#L546","https://github.com/advisories/GHSA-f8q4-jwww-x3wv"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2022-166","url":"https://osv.dev/vulnerability/PYSEC-2022-166"}],"summary":"In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure."}