{"action":"Upgrade rpyc to 6.0.0 or later.","affected":[{"fixed":"6.0.0","introduced":"0"}],"component":"rpyc","cve_ids":["CVE-2024-27758"],"ecosystem":"PyPI","epss":0.00507,"exploited":false,"fixed_versions":["6.0.0"],"ghsa_id":"GHSA-h5cg-53g7-gqjw","id":"tcs_01M5KGN854EP8F7F6WWSNRVMN1","modified_at":"2024-03-12T19:41:32.129797Z","published_at":"2024-03-12T16:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2024-44","https://gist.github.com/renbou/957f70d27470982994f12a1d70153d09","https://github.com/tomerfiliba-org/rpyc/security/advisories/GHSA-h5cg-53g7-gqjw"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2024-44","url":"https://osv.dev/vulnerability/PYSEC-2024-44"}],"summary":"In RPyC before 6.0.0, when a server exposes a method that calls the attribute named __array__ for a client-provided netref (e.g., np.array(client_netref)), a remote attacker can craft a class that res"}