PyPI/txaws CVE-2017-1000007: medium 5.9, EPSS 0.75%
txAWS (all current versions) fail to perform complete certificate verification resulting in vulnerability to MitM attacks and information disclosure.
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.1 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2017-85
- nvd: CVE-2017-1000007
- https://github.com/twisted/txaws/issues/24
- https://github.com/advisories/GHSA-cggm-52qp-wvw7
CVE-2017-1000007 · published · modified · JSON