{"action":"Upgrade apache-submarine to 0.8.0 or later.","affected":[{"fixed":"0.8.0","introduced":"0.7.0"}],"component":"apache-submarine","cve_ids":["CVE-2023-46302"],"ecosystem":"PyPI","epss":0.01747,"exploited":false,"fixed_versions":["0.8.0"],"ghsa_id":"GHSA-8hcr-5x2g-9f7j","id":"tcs_01M5KGK2CR35M90AWGKDFWCXZS","modified_at":"2026-06-10T17:00:32.905561159Z","published_at":"2023-11-20T09:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2023-240","https://issues.apache.org/jira/browse/SUBMARINE-1371","https://github.com/apache/submarine/pull/1054","https://lists.apache.org/thread/zf0wppzh239j4h131hm1dbswfnztxrr5","https://github.com/advisories/GHSA-8hcr-5x2g-9f7j"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2023-240","url":"https://osv.dev/vulnerability/PYSEC-2023-240"}],"summary":"Apache Software Foundation Apache Submarine has a bug when serializing against yaml. The bug is caused by snakeyaml https://nvd.nist.gov/vuln/detail/CVE-2022-1471 ."}