Vulnerability in Hail-is Hail
CVE-2023-51663
Hail is an open-source, general-purpose, Python-based data analysis tool with additional data types and methods for working with genomic data. Hail relies on OpenID Connect (OIDC) email addresses from ID tokens to verify the validity of a…
EPSS: 0.001 (24.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L.
Affected products
- Hail-is Hail — versions < 0.2.127
Weakness classification (CWE)
References
- https://github.com/hail-is/hail/security/advisories/GHSA-487p-qx68-5vjw (x_refsource_CONFIRM)
Frequently asked questions
- What is CVE-2023-51663?
- CVE-2023-51663 is a medium-severity vulnerability in Hail-is Hail, classified under CWE-289. CVSS score: 5.3/10. Published 2023-12-29.
- How severe is CVE-2023-51663?
- Medium severity. CVSS v3 base score is 5.3 out of 10.