{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"temporai","cve_ids":["CVE-2024-0936"],"ecosystem":"PyPI","epss":0.00668,"exploited":false,"fixed_versions":[],"id":"tcs_01M5KGMG3ERGR1GD0W9XD7X3RD","modified_at":"2024-02-01T18:42:05.298969Z","published_at":"2024-01-26T17:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2024-21","https://vuldb.com/?id.252181","https://vuldb.com/?ctiid.252181","https://github.com/bayuncao/vul-cve-5","https://github.com/bayuncao/vul-cve-5/blob/main/poc.py"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"PYSEC-2024-21","url":"https://osv.dev/vulnerability/PYSEC-2024-21"}],"summary":"A vulnerability classified as critical was found in van_der_Schaar LAB TemporAI 0.0.3. Affected by this vulnerability is the function load_from_file of the component PKL File Handler. The manipulation"}