{"action":"Upgrade flair to 0.15.0 or later.","affected":[{"fixed":"0.15.0","introduced":"0"}],"component":"flair","cve_ids":["CVE-2024-10073"],"ecosystem":"PyPI","epss":0.00612,"exploited":false,"fixed_versions":["0.15.0"],"ghsa_id":"GHSA-9rw2-jf8x-cgwm","id":"tcs_01M5KGS7KXHRH4QZ3QXB8ZACSY","modified_at":"2026-07-07T17:47:36.752173168Z","published_at":"2026-07-07T14:34:43.325495Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1376","https://nvd.nist.gov/vuln/detail/CVE-2024-10073","https://github.com/flairNLP/flair/commit/fb27c7eb1d92855c27db820a108b17883a5d6fc1","https://github.com/bayuncao/vul-cve-20","https://github.com/bayuncao/vul-cve-20/blob/main/PoC.py","https://github.com/flairNLP/flair","https://github.com/flairNLP/flair/releases/tag/v0.15.0","https://vuldb.com/?ctiid.280722","https://vuldb.com/?id.280722","https://vuldb.com/?submit.420055","https://pypi.org/project/flair","https://github.com/advisories/GHSA-9rw2-jf8x-cgwm"],"severity":{"label":"medium","score":5},"sources":[{"source":"osv","source_id":"PYSEC-2026-1376","url":"https://osv.dev/vulnerability/PYSEC-2026-1376"}],"summary":"Flair allows arbitrary code execution"}