{"action":"Upgrade unoconv to 0.9.0 or later.","affected":[{"fixed":"0.9.0","introduced":"0"}],"component":"unoconv","cve_ids":["CVE-2019-17400"],"ecosystem":"PyPI","epss":0.02158,"exploited":false,"fixed_versions":["0.9.0"],"ghsa_id":"GHSA-27p5-7cw6-m45h","id":"tcs_01M5KES3RGB128W5N9CEJVHB0H","modified_at":"2024-11-18T22:26:35.380946Z","published_at":"2019-10-24T20:46:54Z","references":["https://osv.dev/vulnerability/GHSA-27p5-7cw6-m45h","https://nvd.nist.gov/vuln/detail/CVE-2019-17400","https://github.com/unoconv/unoconv/pull/510","https://buer.haus/2019/10/18/a-tale-of-exploitation-in-spreadsheet-file-conversions","https://github.com/advisories/GHSA-27p5-7cw6-m45h","https://github.com/pypa/advisory-database/tree/main/vulns/unoconv/PYSEC-2019-213.yaml","https://github.com/unoconv/unoconv"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-27p5-7cw6-m45h","url":"https://osv.dev/vulnerability/GHSA-27p5-7cw6-m45h"}],"summary":"Server-Side Request Forgery in unoconv"}