{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"exiv2","cve_ids":["CVE-2023-44398"],"ecosystem":"PyPI","epss":0.00965,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-hrw9-ggg3-3r4r","id":"tcs_01M5KGK1BKJP6PE893401T39GX","modified_at":"2025-10-09T08:26:40.736495Z","published_at":"2023-11-06T18:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2023-233","https://github.com/Exiv2/exiv2/security/advisories/GHSA-hrw9-ggg3-3r4r","https://github.com/Exiv2/exiv2/commit/e884a0955359107f4031c74a07406df7e99929a5"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"PYSEC-2023-233","url":"https://osv.dev/vulnerability/PYSEC-2023-233"}],"summary":"Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds write was found in Exiv2 version v0.28.0. The vulnerable fu"}