{"action":"Upgrade csound to 5.08.2~dfsg-1.1 or later.","affected":[{"fixed":"5.08.2~dfsg-1.1","introduced":"0"}],"component":"csound","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["5.08.2~dfsg-1.1"],"id":"tcs_01M5N967QFMZGCPFZBT7B8FZ8K","modified_at":"2026-10-23T17:47:25.249534915Z","published_at":"2009-01-28T11:30:00.217Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2008-5986","https://security-tracker.debian.org/tracker/CVE-2008-5986"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2008-5986","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2008-5986"}],"summary":"Untrusted search path vulnerability in the (1) \"VST plugin with Python scripting\" and (2) \"VST plugin for writing score generators in Python\" in Csound 5.08.2, and possibly other versions, allows loca"}