{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"3.23.0"}],"component":"aim","cve_ids":["CVE-2024-8061"],"ecosystem":"PyPI","epss":0.00482,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-6w7p-xrvp-p7xv","id":"tcs_01M5KGQFGACDHCSGTPSAV8KBGW","modified_at":"2026-07-07T17:46:24.015660511Z","published_at":"2026-07-07T14:34:56.649657Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1083","https://nvd.nist.gov/vuln/detail/CVE-2024-8061","https://github.com/aimhubio/aim","https://github.com/aimhubio/aim/blob/a6c6f2fee0f1abe37c1d66701b0329fb6af31a3d/aim/ext/transport/client.py#L258","https://huntr.com/bounties/c85d005c-b354-4c51-a88f-adda2f09622b","https://pypi.org/project/aim","https://github.com/advisories/GHSA-6w7p-xrvp-p7xv"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"PYSEC-2026-1083","url":"https://osv.dev/vulnerability/PYSEC-2026-1083"}],"summary":"Aim allows denial of service due to no timeouts for some tracking server endpoints"}