PyPI/transifex-client CVE-2013-7110: high 7.5, EPSS 0.83%

Transifex command-line client has improper certificate validation

Action: Upgrade transifex-client to 0.10 or later.

pip install transifex-client==0.10

Affected

Fixed versions

Sources

• osv: GHSA-jf99-2rj4-jxrm
• https://nvd.nist.gov/vuln/detail/CVE-2013-7110
• https://github.com/transifex/transifex-client/issues/42
• https://github.com/transifex/transifex-client/commit/e0d1f8b38ec1a24e2999d63420554d8393206f58
• https://github.com/pypa/advisory-database/tree/main/vulns/transifex-client/PYSEC-2014-72.yaml
• https://github.com/transifex/transifex-client
• http://www.openwall.com/lists/oss-security/2013/12/13/5
• http://www.openwall.com/lists/oss-security/2013/12/15/3

CVE-2013-7110 · published 2022-05-17T04:45:17Z · modified 2024-11-18T22:08:15.585051Z · JSON