{"action":"Upgrade twisted to 19.7.0rc1 or later.","affected":[{"fixed":"19.7.0rc1","introduced":"0"}],"component":"twisted","cve_ids":["CVE-2019-12855"],"ecosystem":"PyPI","epss":0.01809,"exploited":false,"fixed_versions":["19.7.0rc1"],"ghsa_id":"GHSA-65rm-h285-5cc5","id":"tcs_01M5KF2J01ZGPJP34N922T0J0N","modified_at":"2024-12-06T05:26:31.559414Z","published_at":"2019-08-16T14:02:35Z","references":["https://osv.dev/vulnerability/GHSA-65rm-h285-5cc5","https://nvd.nist.gov/vuln/detail/CVE-2019-12855","https://github.com/twisted/twisted/pull/1147","https://github.com/pypa/advisory-database/tree/main/vulns/twisted/PYSEC-2019-129.yaml","https://github.com/twisted/twisted","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PLTZDMFBNFSJMBXYJNGJHENJA4H2TSMZ","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PLTZDMFBNFSJMBXYJNGJHENJA4H2TSMZ","https://twistedmatrix.com/trac/ticket/9561","https://usn.ubuntu.com/4308-1","https://usn.ubuntu.com/4308-2","https://www.oracle.com/security-alerts/cpuapr2020.html","http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00013.html","http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00028.html"],"severity":{"label":"high","score":7.4},"sources":[{"source":"osv","source_id":"GHSA-65rm-h285-5cc5","url":"https://osv.dev/vulnerability/GHSA-65rm-h285-5cc5"}],"summary":"Improper Certificate Validation in Twisted"}