{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.0.29"}],"component":"wabt","cve_ids":["CVE-2023-27117"],"ecosystem":"PyPI","epss":0.00318,"exploited":false,"fixed_versions":[],"id":"tcs_01M5KGKF4Z7A2SC5GYYBWVKTDG","modified_at":"2026-05-21T15:00:30.430564389Z","published_at":"2023-03-10T02:15:58.553Z","references":["https://osv.dev/vulnerability/PYSEC-2023-317","https://github.com/WebAssembly/wabt/issues/1989"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"PYSEC-2023-317","url":"https://osv.dev/vulnerability/PYSEC-2023-317"}],"summary":"WebAssembly v1.0.29 was discovered to contain a heap overflow via the component component wabt::Node::operator."}