{"action":"Upgrade horovod to 0.24.0 or later.","affected":[{"fixed":"0.24.0","introduced":"0"}],"component":"horovod","cve_ids":["CVE-2022-0315"],"ecosystem":"PyPI","epss":0.00959,"exploited":false,"fixed_versions":["0.24.0"],"ghsa_id":"GHSA-47wv-vhj2-g66m","id":"tcs_01M5KGGB5EKXFW8F36XAJDHVAT","modified_at":"2023-11-08T04:07:31.934342Z","published_at":"2022-03-24T09:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2022-175","https://huntr.dev/bounties/7e50397b-dd63-4bb5-b56d-704094a7da45","https://github.com/horovod/horovod/commit/b96ecae4dc69fc0a83c7c2d3f1dde600c20a1b41","https://github.com/advisories/GHSA-47wv-vhj2-g66m"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2022-175","url":"https://osv.dev/vulnerability/PYSEC-2022-175"}],"summary":"Insecure Temporary File in GitHub repository horovod/horovod prior to 0.24.0."}