{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.1.1"}],"component":"agentscope","cve_ids":["CVE-2024-8551"],"ecosystem":"PyPI","epss":0.01022,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-j9rw-qm5f-r8xm","id":"tcs_01M5KH04FZB80WE83KB2XPZTTT","modified_at":"2026-07-01T20:22:47.633996Z","published_at":"2026-06-29T11:50:35.430041Z","references":["https://osv.dev/vulnerability/PYSEC-2026-255","https://nvd.nist.gov/vuln/detail/CVE-2024-8551","https://github.com/modelscope/agentscope","https://github.com/modelscope/agentscope/blob/01530ee6a99c86426aab1be11ec3b3b86ca640ac/src/agentscope/studio/_app.py#L680","https://huntr.com/bounties/e0c0c294-f1e2-4f2c-a632-a9be9fd06989","https://pypi.org/project/agentscope","https://github.com/advisories/GHSA-j9rw-qm5f-r8xm"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"PYSEC-2026-255","url":"https://osv.dev/vulnerability/PYSEC-2026-255"}],"summary":"AgentScope path traversal vulnerability in save-workflow"}