{"action":"Upgrade openssh-key-parser to 0.0.6 or later.","affected":[{"fixed":"0.0.6","introduced":"0"}],"component":"openssh-key-parser","cve_ids":["CVE-2022-31124"],"ecosystem":"PyPI","epss":0.01334,"exploited":false,"fixed_versions":["0.0.6"],"ghsa_id":"GHSA-hm37-9xh2-q499","id":"tcs_01M5KGGP1HGAR863WEQV97FJ5Z","modified_at":"2023-11-08T04:09:26.994947Z","published_at":"2022-07-06T18:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2022-233","https://github.com/scottcwang/openssh_key_parser/commit/d5b53b4b7e76c5b666fc657019dbf864fb04076c","https://github.com/scottcwang/openssh_key_parser/security/advisories/GHSA-hm37-9xh2-q499","https://github.com/scottcwang/openssh_key_parser/pull/5","https://github.com/scottcwang/openssh_key_parser/commit/26e0a471e9fdb23e635bc3014cf4cbd2323a08d3","https://github.com/scottcwang/openssh_key_parser/commit/274447f91b4037b7050ae634879b657554523b39"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2022-233","url":"https://osv.dev/vulnerability/PYSEC-2022-233"}],"summary":"openssh_key_parser is an open source Python package providing utilities to parse and pack OpenSSH private and public key files. In versions prior to 0.0.6 if a field of a key is shorter than it is dec"}