{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"mindspore","cve_ids":["CVE-2023-2970"],"ecosystem":"PyPI","epss":0.00882,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-x67g-47p3-rc7f","id":"tcs_01M5KGKRHGD81XK62DP0JXB98Y","modified_at":"2026-06-10T17:02:16.096765659Z","published_at":"2023-05-30T06:16:00Z","references":["https://osv.dev/vulnerability/PYSEC-2023-81","https://vuldb.com/?ctiid.230176","https://vuldb.com/?id.230176","https://gitee.com/mindspore/mindspore/issues/I73DOS","https://gitee.com/mindspore/mindspore/commit/30f4729ea2c01e1ed437ba92a81e2fc098d608a9","https://github.com/advisories/GHSA-x67g-47p3-rc7f"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2023-81","url":"https://osv.dev/vulnerability/PYSEC-2023-81"}],"summary":"A vulnerability classified as problematic was found in MindSpore 2.0.0-alpha/2.0.0-rc1. This vulnerability affects the function JsonHelper::UpdateArray of the file mindspore/ccsrc/minddata/dataset/uti"}