{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.0.4"}],"component":"agentscope","cve_ids":["CVE-2024-8487"],"ecosystem":"PyPI","epss":0.00295,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-75v5-6885-59f9","id":"tcs_01M5KGPWSRDJ90JF14Z0YSMAH5","modified_at":"2026-06-10T17:00:08.880389473Z","published_at":"2025-03-20T10:15:42.360Z","references":["https://osv.dev/vulnerability/PYSEC-2025-81","https://huntr.com/bounties/7aca7507-a94e-4e63-83a2-15648e5c4067","https://github.com/advisories/GHSA-75v5-6885-59f9"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"PYSEC-2025-81","url":"https://osv.dev/vulnerability/PYSEC-2025-81"}],"summary":"A Cross-Origin Resource Sharing (CORS) vulnerability exists in modelscope/agentscope version v0.0.4. The CORS configuration on the agentscope server does not properly restrict access to only trusted o"}