{"action":"Upgrade pyrage to 1.2.3 or later.","affected":[{"fixed":"1.2.3","introduced":"1.2.0"}],"component":"pyrage","cve_ids":["CVE-2024-56327"],"ecosystem":"PyPI","epss":0.00499,"exploited":false,"fixed_versions":["1.2.3"],"ghsa_id":"GHSA-47h8-jmp3-9f28","id":"tcs_01M5KGW04PQ7H3HQVGBBXGDWT5","modified_at":"2026-07-07T17:46:59.507577103Z","published_at":"2026-07-07T14:34:47.620501Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1839","https://github.com/FiloSottile/age/security/advisories/GHSA-32gq-x56h-299c","https://github.com/str4d/rage/security/advisories/GHSA-4fg7-vxc8-qx5w","https://github.com/woodruffw/pyrage/security/advisories/GHSA-47h8-jmp3-9f28","https://nvd.nist.gov/vuln/detail/CVE-2024-56327","https://github.com/advisories/GHSA-4fg7-vxc8-qx5w","https://github.com/woodruffw/pyrage","https://pypi.org/project/pyrage","https://github.com/advisories/GHSA-47h8-jmp3-9f28"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"PYSEC-2026-1839","url":"https://osv.dev/vulnerability/PYSEC-2026-1839"}],"summary":"pyrage vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary execution"}