{"action":"Upgrade qpid-python to 0.22 or later.","affected":[{"fixed":"0.22","introduced":"0"}],"component":"qpid-python","cve_ids":["CVE-2013-1909"],"ecosystem":"PyPI","epss":0.01824,"exploited":false,"fixed_versions":["0.22"],"ghsa_id":"GHSA-3g2p-7c6p-vj8c","id":"tcs_01M5KEVQKTKPV4QF5T5XJEPTB8","modified_at":"2024-10-25T21:22:53.008095Z","published_at":"2022-05-13T01:08:41Z","references":["https://osv.dev/vulnerability/GHSA-3g2p-7c6p-vj8c","https://nvd.nist.gov/vuln/detail/CVE-2013-1909","https://github.com/apache/qpid-python/commit/7d8f51791c4949404d78f1083f465b7b4c8e954b","https://github.com/apache/qpid-python","https://github.com/pypa/advisory-database/tree/main/vulns/qpid-python/PYSEC-2013-25.yaml","https://issues.apache.org/jira/browse/QPID-4918","https://web.archive.org/web/20140722191407/http://secunia.com/advisories/53968","https://web.archive.org/web/20140722194233/http://secunia.com/advisories/54137","http://qpid.apache.org/releases/qpid-0.22/release-notes.html","http://rhn.redhat.com/errata/RHSA-2013-1024.html","http://svn.apache.org/viewvc?view=revision&revision=1460013"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-3g2p-7c6p-vj8c","url":"https://osv.dev/vulnerability/GHSA-3g2p-7c6p-vj8c"}],"summary":"Apache Qpid Python client Improper certificate validation"}