A dependency on a vulnerable third‑party component within the GitHub repository ‘zero‑shot‑scfoundation’ allows an unauthorized attacker to execute code over the network. The primary impact is remote code execution, as identified by CWE‑1395. The vulnerability could let an attacker run arbitrary code, compromising confidentiality, integrity, and availability of any systems that rely on this repository.

Affected systems are the Microsoft GitHub repository named ‘zero‑shot‑scfoundation’. No specific version information is provided, so all versions of the repository that depend on the vulnerable component are potentially impacted.

The CVSS base score is 8.8, indicating high severity. The EPSS score is less than 1%, suggesting a low probability of exploitation at the current time. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog. The likely attack vector is network‑based, where an unauthorized attacker could exploit the dependency remotely. However, the exact method of execution is not detailed in the available data and is inferred from the description.