{"action":"No fix published. Pin and monitor.","affected":[],"component":"gratient","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":[],"id":"tcs_01M5KGKVYK1A1FPF22VZB01D0B","modified_at":"2024-01-03T22:31:36Z","published_at":"2024-01-03T22:31:36Z","references":["https://osv.dev/vulnerability/PYSEC-2024-1","https://inspector.pypi.io/project/gratient/0.5/packages/c5/c5/353e45fa57fa5f1b2b42fa24a029cdfb018d7263850fb43b6d6352157734/gratient-0.5-py3-none-any.whl/gratient/__init__.py#line.4","https://pypi.org/project/gratient/"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2024-1","url":"https://osv.dev/vulnerability/PYSEC-2024-1"}],"summary":"gratient 0.5 contains credential harvesting code"}