{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.4.4rc3"}],"component":"chia-blockchain","cve_ids":["CVE-2022-36447"],"ecosystem":"PyPI","epss":0.00859,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-pvjg-jwp3-mrj5","id":"tcs_01M5KGHQ84CFJ5T3024WNX3HEZ","modified_at":"2024-11-25T22:42:02.057936Z","published_at":"2022-07-29T21:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2022-43072","https://chia.net","https://www.chia.net/2022/07/25/upgrading-the-cat-standard.en.html"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"PYSEC-2022-43072","url":"https://osv.dev/vulnerability/PYSEC-2022-43072"}],"summary":"An inflation issue was discovered in Chia Network CAT1 Standard 1.0.0. Previously minted tokens minted on the Chia blockchain using the CAT1 standard can be inflated to an arbitrary extent by any hold"}