{"action":"Upgrade ubi-reader to 0.8.2 or later.","affected":[{"fixed":"0.8.2","introduced":"0"}],"component":"ubi-reader","cve_ids":["CVE-2022-4572"],"ecosystem":"PyPI","epss":0.00588,"exploited":false,"fixed_versions":["0.8.2"],"ghsa_id":"GHSA-hc37-84v3-8gmq","id":"tcs_01M5KGHEBGDGHCDMYWFFPBV3K5","modified_at":"2026-06-10T17:02:48.165223683Z","published_at":"2022-12-17T02:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2022-43016","https://github.com/jrspruitt/ubi_reader/releases/tag/v0.8.5-master","https://github.com/jrspruitt/ubi_reader/commit/d5d68e6b1b9f7070c29df5f67fc060f579ae9139","https://vuldb.com/?id.216146","https://github.com/jrspruitt/ubi_reader/pull/57","https://github.com/advisories/GHSA-hc37-84v3-8gmq"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2022-43016","url":"https://osv.dev/vulnerability/PYSEC-2022-43016"}],"summary":"A vulnerability, which was classified as problematic, has been found in UBI Reader up to 0.8.0. Affected by this issue is the function ubireader_extract_files of the file ubireader/ubifs/output.py of"}