{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.3.1"}],"component":"ai-flow","cve_ids":["CVE-2024-0960"],"ecosystem":"PyPI","epss":0.00719,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-7mgg-3rq2-hff4","id":"tcs_01M5KGQEQ544VVGJ8NCCPPMDH7","modified_at":"2026-07-07T17:46:20.007127130Z","published_at":"2026-07-07T11:45:31.347761Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1079","https://nvd.nist.gov/vuln/detail/CVE-2024-0960","https://github.com/bayuncao/vul-cve-8","https://github.com/bayuncao/vul-cve-8/blob/main/dataset.pkl","https://github.com/flink-extended/ai-flow","https://vuldb.com/?ctiid.252205","https://vuldb.com/?id.252205","https://pypi.org/project/ai-flow","https://github.com/advisories/GHSA-7mgg-3rq2-hff4"],"severity":{"label":"medium","score":5},"sources":[{"source":"osv","source_id":"PYSEC-2026-1079","url":"https://osv.dev/vulnerability/PYSEC-2026-1079"}],"summary":"ai-flow Deserialization of Untrusted Data vulnerability"}