{"action":"Upgrade mobsf to 3.9.7 or later.","affected":[{"fixed":"3.9.7","introduced":"0"}],"component":"mobsf","cve_ids":["CVE-2024-54000"],"ecosystem":"PyPI","epss":0.00413,"exploited":false,"fixed_versions":["3.9.7"],"ghsa_id":"GHSA-m435-9v6r-v5f6","id":"tcs_01M5KGMS1S1ZB16XE2R1BYW83M","modified_at":"2025-06-27T18:14:49.203947Z","published_at":"2024-12-03T16:15:24Z","references":["https://osv.dev/vulnerability/PYSEC-2024-256","https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-m435-9v6r-v5f6","https://github.com/MobSF/Mobile-Security-Framework-MobSF/commit/f22c584aa7d43527970c9da61eb678953cfc0a8e"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"PYSEC-2024-256","url":"https://osv.dev/vulnerability/PYSEC-2024-256"},{"source":"nvd","source_id":"CVE-2024-54000","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-54000"}],"summary":"Mobile Security Framework (MobSF) is a pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis. In versions prior to 3.9.7, the requests.get()"}