{"action":"Upgrade zipp to 3.19.1 or later.","affected":[{"fixed":"3.19.1","introduced":"0"}],"component":"zipp","cve_ids":["CVE-2024-5569"],"ecosystem":"PyPI","epss":0.00236,"exploited":false,"fixed_versions":["3.19.1"],"ghsa_id":"GHSA-jfmj-5v4g-7637","id":"tcs_01M5KGXAXYKX3NBY66G4EDF3VP","modified_at":"2026-07-07T17:48:17.171146333Z","published_at":"2026-07-07T14:34:36.616482Z","references":["https://osv.dev/vulnerability/PYSEC-2026-2074","https://nvd.nist.gov/vuln/detail/CVE-2024-5569","https://github.com/jaraco/zipp/commit/fd604bd34f0343472521a36da1fbd22e793e14fd","https://github.com/jaraco/zipp","https://huntr.com/bounties/be898306-11f9-46b4-b28c-f4c4aa4ffbae","https://pypi.org/project/zipp","https://github.com/advisories/GHSA-jfmj-5v4g-7637"],"severity":{"label":"medium","score":6.2},"sources":[{"source":"osv","source_id":"PYSEC-2026-2074","url":"https://osv.dev/vulnerability/PYSEC-2026-2074"}],"summary":"zipp Denial of Service vulnerability"}