{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"chuanhuchatgpt","cve_ids":["CVE-2024-6255"],"ecosystem":"PyPI","epss":0.13662,"exploited":false,"fixed_versions":[],"id":"tcs_01M5KGNDRED6ZZKVXR0S372RFC","modified_at":"2024-08-27T15:41:59.449837Z","published_at":"2024-07-31T01:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2024-73","https://huntr.com/bounties/48f3e370-6dcd-4f38-9350-d0419b3a7f82"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"PYSEC-2024-73","url":"https://osv.dev/vulnerability/PYSEC-2024-73"}],"summary":"A vulnerability in the JSON file handling of gaizhenbiao/chuanhuchatgpt version 20240410 allows any user to delete any JSON file on the server, including critical configuration files such as `config.j"}